SecureBoot support

We now have our own shim signed by Microsoft, yeah!!