Looking at the members on the repository this seems to be a Microsoft project?
As far as I remmeber, they control the issuance of keys for bootloaders. Or is this project supposed to do away with that?
https://microsoft.github.io/mu/