upgrade-from: Protecting all grub stuff

In fact the complete grub directory requires a protection to avoid
deletiong of grub.cfg and device.map