[raphman]

nope, rEFIt would need to be signed, too, as it is involved in the boot process.