http://www.linuxfoundation.org/news-media/blogs/browse/2013/09/booting-self-signed-linux-kernel
Looks Interesting. It seems to me that updating a kernel could no longer be an automatic update.The legacy bootloader, MBR, is not used because the kernel boots directly. Steve would probably know how to make this work with dual booting.