start more work for uefi boot, adding fedora's lockdown-ms for secure-boot keys, one more attempt to update os-prober