Just blow the right hardware fuses and secure boot will be forced with a key that doesn't (or can't) exist.