- if secure boot is enabled it's required to tell that
  in /etc/default/grub to make grub2-mkconfig produce
  correct results