The fixes for mokutil and kernel post script are pushed. mokutil will ignore the enrollment of openSUSE Signkey once it detects openSUSE CA in MokListRT.