this is required for secure boot support.
at build time, an ephemeral key pair will be generated and all built modules
will be signed with it. the private key is discarded, and the public key
embedded in the kernel image for signature validation at module load time.
Signed-off-by: Fabian Grünbichler <f.gruenbichler@proxmox.com>