shim-signed: debconf-is-not-a-registry usr/sbin/update-secureboot-policy