Be careful with removing the Microsoft keys. You can lock yourself out in some cases. For example, GPU firmware may be signed with the Microsoft keys. This means that your GPU will no longer work and you can’t access the UEFI config to fix it. That’s not too big of a deal in a desktop, since you can usually switch to the integrated GPU to fix things. But on a laptop you might be totally screwed.