We are considering enabling the Secure Boot V2 for our devices and one of the considerations is whether signing the second-stage bootloader with multiple keys makes sense at all. I understand that the way this works is that multiple keys (actually their hash) are stored in the eFuse and the ROM boot...