Draft — this page will cover: installing the signed file, what expiry locks, and why expiry never blocks startup.