That'll teach me to read logs at 6AM

.
Code:
get_key_path()
{
case "${1}" in
0|CERT_DEV) if [ -f "/PRE_GM_DEBUGGING_FEATURES_ENABLED__REMOVE_AT_GMC" ]; then
echo "/etc/uks/pubdevkey01.pem"
else
return 1
fi ;;
1|CERT_1K) echo "/etc/uks/pubprodkey01.pem" ;;
2|CERT_2K) echo "/etc/uks/pubprodkey02.pem" ;;
*) return 1 ;;
esac
return 0
}
TL;DR: Nope, you're screwed. It was fun while it lasted, guys.