[OS-BUILD PATCH] redhat: drop certificates that were deprecated after GRUB's BootHole flaw