# Third-party plugin vendors this image no longer trusts (docs/release-keys.md
# "Certifying vendors"). One VENDOR_ID, or the SHA-256 (hex) of a vendor key's
# DER public key, per line; # starts a comment. Installed as
# /usr/share/iron/keys/revoked-vendors and into the initramfs, so a revocation
# reaches a host with the image that carries it: a revoked vendor's plugins are
# refused at install and skipped at boot.
