put back secboot for now