[arch-releng] Switch back to signed preloader/hashtool?

Hello Since the switch from prebootloader to efitools, *.efi are not signed. Do make any sense having such files? Booting on EFI SBE result in access denied. I am missing something and these tools are useful "as-is" now for other purposes? We can just avoid install the package and download signed files directly, or having another package with these files on repo. Thanks.