Fix sec boot

`location_changed = (@secure_boot != enable)` ? BTW `enable` is `new_state` isn't it?