diff --git a/sbin/grub-unsign b/sbin/grub-unsign
index e6934c2..e6b2fce 100755
--- a/sbin/grub-unsign
+++ b/sbin/grub-unsign
@@ -21,7 +21,7 @@ case "$stat" in
 	;&
 0|3)	
   # Then remove the signatures.
-  find /boot -iname "efi" -prune -o -name '*.sig' -exec rm {} +
+  find /boot -iname "efi" -prune -o -name '*.sig' -exec shred --remove=unlink {} +
 
   echo "GRUB2 unsigned. WARNING: If you want to deactivate GRUB2's signature feature, change the check_signatures variable in the headers file!"
   exit 0
diff --git a/sbin/grub-update-kernel-signature b/sbin/grub-update-kernel-signature
index 947699e..2ef2580 100755
--- a/sbin/grub-update-kernel-signature
+++ b/sbin/grub-update-kernel-signature
@@ -24,8 +24,8 @@ function sign(){
 }
 
 
-rm /boot/*.sig
-rm /boot/grub/grub.cfg.sig
+shred --remove=unlink /boot/*.sig
+shred --remove=unlink /boot/grub/grub.cfg.sig
 
 if ! sign
 then