enable Linux kernel gpg verification in grub and/or enable Secure Boot by default