Hehe: 
 Step 1) build a firmware image.
 Step 2) Relaize it was signed with test keys. Rebuild image and sign it with production keys
 Step 3) Load production keys as custom avb_keys
 Step 4) load image from step 1
 Step 5) enable OEM locking
 Step 6) view the glorious "No Valid OS Found".