A kernel image for oem. This version of it is signed with Canonical's UEFI/Opal signing key.