Generate a second mar signing key for nightly
We currently have only one mar signing key accepted by the nightly builds. To plan for rotation of the key, we should generate a second one in advance (offline), and add it as toolkit/mozapps/update/updater/nightly_aurora_level3_secondary.der.
To upload designs, you'll need to enable LFS and have admin enable hashed storage. More information