Comment # 10 on bug 1134303 from Guillaume GARDET

Created attachment 804591 [details]
Patch to enable non-x86 kernels signing in spec, if CONFIG_EFI_STUB=y

Move BRP_PESIGN_FILES handling to be able to make use of $image var for kernel
name. Signing is still guarded by CONFIG_EFI_STUB=y so that ppc and s390
kernels are not signed, but aarch64 kernels are.