The docs you linked say that you can run the mokutil commands yourself INSTEAD of the ujust script should you be in a scenario where you’re rebasing and want to enroll the key before you even have access to ujust.
That’s an excellent guess that would’ve never crossed my mind. Nice job. Seems like you’re in the home stretch, now!