Yes, I can test. I'll keep that test-installed version around for testing. I can try enrolling the key if needed. But I think I can test without that. I'll just leave secure-boot disabled, but still use the secure-boot menu entry so that it goes through shim.efi, etc.