The lowest security level, permissive, allows to mess with the Secure Boot policy at will. When you use kmutil to add a custom boot entry, enrolling the hash o

The lowest security level, permissive, allows to mess with the Secure Boot policy at will. When you use kmutil to add a custom boot entry, enrolling the hash of your executable to the Secure Boot policy is handled automatically as part of the tool.