[PATCH 12/20] efi: Disable secure boot if shim is in insecure mode