diff --git a/usr/bin/sbctl-batch-sign b/usr/bin/sbctl-batch-sign
index 02434ea..65da1dc 100755
--- a/usr/bin/sbctl-batch-sign
+++ b/usr/bin/sbctl-batch-sign
@@ -10,7 +10,7 @@ if [ "$(id -u)" -ne 0 ]; then
 fi
 
 if [ "$#" -eq 0 ]; then
-    for entries in $(sbctl verify | grep signed | cut -d' ' -f2); do
+    for entries in $(sort -u -i <(sbctl verify | grep 'signed' | cut -d' ' -f2) -i <(find /boot -maxdepth 1 -type f | grep vmlinuz)); do
         sbctl sign -s $entries
     done
 fi