The firmware can check and make sure it is assigned a Windows 7 boot loader.
Right now today, if you want to have secure boot and you want to dual boot Windows 8 and Windows 7, you need to turn secure boot off in firmware.