Future

• More security in UEFI binaries
• NX
• ASLR
• Unified Kernel Images
• Kernel, initramfs, command line all baked in
• More use of TPM
• Architecture updates
• Better handling of revocations
• Maybe via fwupd?