Hey lazyweb -- can you please reply to this post with the output of this command on your system:

strings -f -n 20 /sys/firmware/efi/efivars/{PK-*,db-*,KEK-*} | uniq

I'm trying to make some future fwupd feature look pretty. Thanks!