For me (on an x86 desktop)
efi-readvar -v PK
gives
Variable PK has no entries
and
efi-readvar
gives
Variable PK has no entries
Variable KEK has no entries
Variable db has no entries
Variable dbx has no entries
Variable MokList has no entries
Maybe that indicates that I turned Secure Boot off. Or?