security, efi: Add kernel lockdown [LWN.net]

lwn.net lwn.net