Comment 3 for bug 1938774

To add more detail, sorry for the brevity, the shim-signed package took over the remaining files in the shim package, and the shim package itself is hence no longer needed. The reason for that is that those files (mm*.efi and fb*.efi) were previously signed by an ephemeral key at build time, but are now signed by the signing service like a linux kernel, for example, and hence can't be in the shim package itself.

shim-signed is now marked to prevent it from being removed where installed, which should ensure people don't end up with an unbootable system :)