Well. That took longer than I expected. But it seems to have completed successfully. Will now try to boot into the new default kernel to see if it really worked, before attempting the patch.
Just had to change this line in the “.config” file:
CONFIG_MODULE_SIG_KEY=".kernel_signing_key.pem"
To this:
CONFIG_MODULE_SIG_KEY=""