Secure boot and Microsoft CA rollover: a heads-up for distributions