From: Philipp Rudo on
gitlab.com
https://gitlab.com/cki-project/kernel-ark/-/merge_requests/2917#note_1805...
@berrange I find not having any debug addon way too restrictive. We do need
ways to debug problems that will occur and we really should avoid asking users
to install and maintain their own MOKs. Not only is managing MOKs way less
user friendly but it also leads to much bigger security problems if a MOK
falls into the wrong hands. Much worse than any "wrong" addon could cause.
Especially as every addon is measured in the TPM so users do have a way to
verify that only the allowed set of addons were loaded.