The process of getting a new version of shim-signed is long and
complex, and not entirely under our control:
1. Build shim, test the hell out of it.
2. Upload shim, wait for it to build, check that the binary is
reproducible.
3. Submit a shim-review issue (or several) at
https://github.com/rhboot/shim-review/issues .
4. Upload our binaries to Microsoft's site for signing.
5. Wait for the review (and maybe fix things), potentially multiple
passes here.
6. Wait for the signature to come back.
7. Prepare the shim-signed package with the signed binaries, and test
like hell.
8. Upload shim-signed.
We're currently at step 5.