farrotin@redhat.com mentioned a secureboot test we could plug into the existing compose testing: https://github.com/arrfab/secureboot_test

That would be useful to have once we get the signed shim included in the distro.