Dear Maintainer,

Each time shim-signed is updated, I noticed that the boot order of EFI is
changed and set back to putting "debian" again as 1st boot entry.

I have a setup where I have put "Refind" as 1st boot entry and therefore it is
overridden every time shim-signed is updated.

It may be because of the call to "grub-install" in
https://sources.debian.org/src/shim-signed/1.44~1+deb12u1/debian/shim-signed.postinst/#L56

Is there a way to circumvent this? Either by updating the default behavior in
the package, or by setting an appropriate option somewhere (eg.
/etc/default/shim)?

Regards