signed kernel+initrd (new modules??)

[bruts]

when signing kernel and initrd with gpg key, i find tutorials that always 
explain to "insmod verify" and then "trust /./boot.key" and "set 
check_signatures=enforce".

this does not work with newest grub, the verify.mod module does not exist 
anymore, is that replaced by verifiers.mod, it seems that way?

so "insmod verifiers" would be needed then, i can hardly find anything on that 
online.

Then when i tried the "trust boot.key" it says it need the pgp module, so 
"insmod pgp" i would assume? there is many tutorials on how to sign 
kernel+initrd, but none include these modules.

Can anyone just explain me what is the correct way to include the correct 
modules for doing this?

Thanks.