Right and we have that in the kernel specfile, too. This is just a fallback so that even test kernels trust the SLES certificate and accept SLES KMPs by default. In the Leap kernel, we can either replace it with the openSUSE certificate or delete it.