Provide a fallback for uninitialized Boot#### and BootOrder
    
      Resolves: rhbz#963359
    - Move all signing from shim-unsigned to here
    - properly compare our generated hash from shim-unsigned with the hash of
      the signed binary (as opposed to doing it manually)