Bits from the Debian Release Team: release update

This is not code that is changed often - usually stable over many years / several releases and so it's not something to mess with lightly is how I read this. We do want a working release mechanism.

Now that the shim is signed by Microsoft, there's nothing to stop the project from sorting out signed kernels and images and so on in a point release part way through Stretch lifetime, I'd guess.

[Not release team, not anything particularly, speaking for myself and not on behalf of Debian Project particularly ... your mileage may vary etc. Usual disclaimers apply.]