added cli options to update-tboot-policy.sh
added a TODO