... and unless your bootloader appears in that list-- is signed by one of those signing keys, ...
... And now it's quite a short list. ...