Comment # 10 on bug 1083723 from Ludwig Nussel

The magic kernel %post script already automatically call mokutil to get the key
imported on next boot if CONFIG_MODULE_SIG=y, that's how the whole discussion
started. See bug 1173115. So way to go is to improve and optimize that that
rather ad hoc mechanism. There is no need to sign devel projects with the
official keys.