simple lockdown script for UEFI Secure Boot