A kernel image for OEM. This version of it is signed with Canonical's UEFI/Opal signing key.