sbattach(1) on Linux
The text 1df963e7a105, as Debian 9 (Stretch) shipped it.
UEFI secure boot detached signature tool
Flags it lists
-
--attach -
--detach -
--remove