Add two new signature modules, the first detects blocking of SafeBoot use and the other detects attempts to disable UAC