set secureboot default to firmware status

set secureboot default to firmware status to not bother user to
set it manually.