Flip secureboot signature order

In preparation for dropping down to the single signature, we need to flip the signature order. Once a new shim is shipped, we can then drop down to a single signature.

Signed-off-by: Justin M. Forbes jforbes@fedoraproject.org