Would be cool to have this signed by a trusted-boot key that ends up in all consumer x86 BIOSes, since it will probably be used by a lot of distributions.