Add some more code to support Secure Boot, and temporarily disable ome other bits that don't work well enough yet. Resolves: rhbz#836695