Do we need to do it without making the uefi mainframe aware...and we don't need to break the chain of trust or else I will lend up in a hash?