When VyOS runs as UEFI secure-boot signed system, installing an image which is not signed is possible.

Rebooting into this image will fail as long as UEFI secure-boot support is installed. The installer should check if the new image is secure-boot signed or not. If it is not signed, it should reject the image installation like we already do for non matching flavors.