Until Microsoft decides to no longer sign the Linux boot loader shim (for IBM/Red Hat, no less).
In most cases you can put your computer secure boot in setup mode and roll your own keys.