Implementing UEFI Secure Boot in Fedora

I think I understand the issues around that and how it commits you to using the one key you can rely on, at least to install, but does that mean you shouldn't pursue getting your own key in there as well? Once a vendor does the work of pre-loading keys they will likely ship on all subsequent devices, that should lead to increasingly complete hardware coverage over the next 5 years or so. It might also eventually lead to the couple of best funded organizations who can get their keys pre-loaded becoming competitive peer authorities creating a marketplace that is not so critically dependent on the continued benevolence of one vendor.