+<li>If you pass the <tt>--shim</tt> option to the script (along with a
+ filename for a shim binary), the script sets up for a Secure Boot
+ configuration via shim. By default, this causes the rEFInd binary to be
+ renamed as <tt>grubx64.efi</tt>. Recent versions of shim support
+ passing the name of the follow-on program to shim via a parameter,
+ though. If you want to use this feature, you can pass the
+ <tt>--keepname</tt> option to <tt>install.sh</tt>.</li>
+