The idea is about drop rescue tools from OpenSuSE installation/live cd and create a tool to prepare custom rescue CD/usb medium.
While creating it, it will be automatically created certificate, warm to save private key in secure place (also show dialog to save it), sign kernel and others and saves tool needed to boot in motherboard memory.
Why? Because by installing OpenSuSE, key will be added to motherboard and anybody could start any OpenSuSE medium to hack system. By dropping rescue tool from OpenSuSE medium and allow to create special medium by special key, we secure the system.