workaround for kexec for locked bootloaders