I think if I were using Linux I'd prefer an option I can specify in modprobe.d to disable signature verification for the kernel module handling this (at my discretion).

Or would this be at like layer 7? :>