ARM-based Windows RT devices must have secure boot permanently enabled.