https://guid.cam/tech/shasta/enable-secure-boot-without-bios/