Add patches to enable loading db and MOK keys
Import patches from:
http://git.kernel.org/cgit/linux/kernel/git/dhowells/linux-fs.git/log/?h=keys-uefi
that enable a new option that automatically loads keys from db and MOK into the secondary keyring, so that they can be used to verify the signature of kernel modules. Enable the required KCONFIGs. Allows users to self-sign modules (eg: dkms).