Here's a resend of the database-as-firmware patches. I've changed it to kmemdup() instead of hanging on to the struct firmware, that way reload actually works without piggy-backing on the existing one that's already loaded.
I've also changed it so you can configure it to not trust the built-in keys and also configure it to load keys from an external directory during build. So I think literally the only thing that this still needs is Seth's key. johannes
