That means you can't observe the kernel itself, but instead you observe a key that signs a kernel.

You can observe the kernel. It’s just extremely awkward because upgrading the kernel will change the kernel.