can the setup scripts for linux-signed-image-generic be made to automatically sign some unsigned kernel modules

I have EFI enabled, and I use linux-signed-image-generic packages.

I also use VirtualBox, the OSE version.

I've created a Machine Owner Key and registered that, and I sign my vbox* drivers with the MOK. If I don't, I get errors in the logs about "unsigned kernel module not loaded" or some such.

Is there a way to have the setup scripts for the linux-signed-image packages automatically sign specific unsigned kernel modules when they install? There would need to be some way to register and securely store the private key for the Machine Owner Key, and a list of modules that the Machine Owner authorizes to be signed when an upgraded signed (EFI) kernel is installed and set up.