Enable secure boot for QEMU

Is there a solution to this that doesn’t involve manually editing an xml file?

If not, could someone post the instructions for manually editing the xml file.

Is it necessary to use the unstable OVMFFull package?