For verified boot we need a signed kernel
For verified boot we need a signed kernel