Reworking kexec for signatures

What? Windows won't boot if you disable SecureBoot? That doesn't sound right ... why wouldn't it just warn you you're not in "secure" mode, disable some DRM shite, and be done with it? I never heard before that it required a REINSTALL!

...and I have a fairly recent system which booted Windows once or twice before I bulldozed it and installed Linux. And it booted with not just Secure Boot disabled but with the legacy BIOS support enabled. What systems have you seen that didn't allow this?