>Any PKI based system is a shit idea unless you are personally in control of the trusted root CA, which in this case you're not With UEFI secure boot, you can

>Any PKI based system is a shit idea unless you are personally in control of the trusted root CA, which in this case you're not With UEFI secure boot, you can delete Microsoft's key and add you own.