Comment # 2 on bug 1190261 from Martin Wilck

Joey, is it possible to use mok-manager to import certificates in DB if
secureboot is disabled?

If it isn't, we could skip the mokutil step in that case.

Or would it make sense to enroll the certs anyway, just in case SB is enabled
at a later time?