Needs to be iterated on, and preferably not work as the existing key
databases.
Reverts: 31c1228c15
Reverts: dae25b8abd
Signed-off-by: Morten Linderud <morten@linderud.pw>
If enrolling the Microsoft db keys, also enroll their KEK. This allows
applying the official dbx updates, which are important for security, as
they allow blocking binaries with known vulnerabilities which Microsoft
has signed in the past.
