If you have done this idea already it have a bug. Inform me to tell you.
idea; Ubuntu enrolls only one MOK for use of 3rd party Apps and drivers that need own kernel, and register their kernel files (with user consent) by that key. So disabling secureboot will not be necessary.