From my reading of the restrictions it appears that the restriction is only on adding new keys to the boot ROM. So makers could ship arm computers with appropriate linux keys in the ROM already, and still be compatible with the WIndows 8 requirements.