[arch-general] Secure Boot Support

[kristof]

Oh, and some UEFI implementations don't actually allow users to add keys  
to the database; only remove them. The workaround to this is to delete all  
keys in the database, which would cause the computer to boot into  
"setup-mode", where a user could manually start repopulating the key  
database. However, this would cause the computer to not be able to boot,  
er, Windows. Some people would like to boot Windows.