Chapter 19. Signing a kernel and modules for Secure Boot