I also have this problem and, unfortunately did not find this bug report earlier and opened a duplicate in #940181. As noted there, I believe the issue can be fixed by setting CONFIG_SECONDARY_TRUSTED_KEYRING=y in the kernel config.
- Bug#935945: linux-image-5.2.0-2-amd64: does not... bedrichperi
- Bug#935945: linux-image-5.2.0-2-amd64: doe... Sven Willner
- Bug#935945: linux-image-5.2.0-2-amd64: doe... Marek Rusinowski
- Bug#935945: refreshed patch Niv Sardi
- Bug#935945: Add patch Niv Sardi
- Processed: Add patch Debian Bug Tracking System
- Bug#935945: marked as done (linux-image-5.... Debian Bug Tracking System
- Bug#935945: fixed in linux 5.3.7-1 Sven Willner
- Bug#935945: (no subject) Sven Willner
- Bug#935945: marked as done (linux-image-5.... Debian Bug Tracking System

