This will allow distributions to package and distribute the unsigned EFI binary separately, similar to what has been done for GRUB.