Supporting third-party keys in a Secure Boot world