... And now it's quite a short list. ...
... and unless your bootloader appears in that list-- is signed by one of those signing keys, ...