[arch-general] UEFI secure boot