[[!meta title="TODO"]]

* Merge Debian Jessie FDE case into `bootfde`.
* Implement per image/device signature checking.