User only needs to press a key during initial installation, after that it should boot unattended just fine: "If the user gives permission, the signature will be installed and loader.efi will then boot up without any present user tests on all subsequent occasions even after the platform is placed back into secure boot mode." http://www.linuxfoundation.org/news-media/blogs/browse/2012/10/linux-foundation-uefi-secure-boot-system-open-source
So I won't have to go around to every classroom and every pc and click OK when I do my monthly wipe and reimage?
If I understand correctly, even reinstallation does not need user attention as long as loader.efi doesn't change. But that's based only on my reading of the article I quoted, so I could be wrong.