ESP32 Secure Boot

Does mongoose-os integrate well with ESP32 Secure Boot?

I know the mos tool supports easy flash encryption, and I can see a mos command to generate a secure boot key.

What things should I watch out for when trying to use Secure Boot with mongoose-os?

It would be good to have a timescale fo enabling secure boot, as its now a requirement of ETSI TS 103 645 so will be required for os bass devices to be compliant.