Comment 8 for bug 1921539

Ideally I would want us to split fwupd into fwupd-unsigned & fwupd-unsigned, like we did with grub.

That way
* fwupd will drop shipping .efi binaries
* fwupd-unsigned will only build and submit .efi binary for signing
* fwupd-signed will ship signed .efi binary

with fwupd-unsigned & fwupd-signed binary copied to all distributions, with relaxed dependencies to not depend on a strict version of fwupd userspace things.

Such that all releases share the very same build of fwupd.efi, just like all releases share the shim.efi and grub.efi nowadays.