@pid_eins @siosm
Yea, that's why clearly defining the thread vector as someone in another post asked you about is so important.
I think I by now understand that you're targeting this as a feature for system integrators selling devices and not to everyone that installed Linux on some random device.
Because then the question of how to get your kernel signed automatically after updating or after you recompiled it locally doesn't even arise to begin with...