I'd settle for that solution anyways, but only as long as users can still mix and match kernels (one for secure boot and games that require anti-cheat, and another for custom hardware)