vigor: insecure boot