sbattach(1) on Linux

The text 59339221f33d, as Debian 11 (Bullseye), Debian 10 (Buster) shipped it.

UEFI secure boot detached signature tool

Flags it lists