[yyyk]

There's mokutil to add your own key.

[csdvrx]

no, a mok is just adding an unprotected UEFI variable. It's not the same as adding your key which can say disallow running payloads signed by Microsoft key.