You can add your key to most UEFI system and don't require shim to have it to boot (or disable Secure Boot). You don't require a MS signed bootloader if you don't want to.