remove arch_extension and use machine code instead of assembly instruction
enable secure boot