Note: You can only do this when the bootloader is unlocked.

When it's locked (which is the entire point of custom verified boot), this is not allowed.