Adding a vendor key allows a new user to upload firmware.
You should not do this unless the vendor is trusted as we will sign
all uploaded files of the user with the sign@fwupd.org private key.
Deactivating a vendor key stops the user adding firmware but does not remove any firmware uploaded with that key.