In SLE15+ Leap15+ and TW kexec -a should suffice to load a kernel regardless of secure boot and kexec_file support. If it does not work please report bugs.