Exactly. That's the "news" part, as it was not allowed by beta1. (In fact, I couldn't boot any unsigned kernel at all).