Until Microsoft decides to no longer sign the Linux boot loader shim (for IBM/Red Hat, no less).
In most cases you can put your computer secure boot in setup mode and roll your own keys.
In most cases you can put your computer secure boot in setup mode and roll your own keys.