[PATCH secure-modules 11/13] efi: Disable secure boot if shim is in insecure mode