Comment # 17 on bug 917427 from Gary Ching-Pang Lin

Although the change in shim-install doesn't affect the signature in shim.efi,
unfortunately, the change was right after a major version update of shim which
would fail rpm building in openSUSE:Factory unless it receives a new signature.

Currently, we only update the signature for the bug fix or security update for
the stable release, so the signature in Factory is unlikely to be updated until
the next stable release.