Port module signing changes from SLE11-SP3 (fate#314508)
rpm/kernel-binary.spec.in: Do not sign firmware files (bnc#867199)
rpm/kernel-binary.spec.in: Fix including the secure boot cert in /etc/uefi/certs