What is the reason to add SUSE signature to shim? If someone rebuilds system with only SUSE key (removing Microsoft), user can also use provided signed grub.efi directly without shim?