Re: [OS-BUILD PATCH] redhat: add secureboot CA certificate to trusted kernel keyring