Signed reports shouldn't be needed for embargo
This is a chicken and egg problem. It is a lot harder to do a signed report if you can't have firmware in embargo to start...
This is something I observed in the problems list for https://fwupd.org/lvfs/firmware/88395/problems