Use grub2-efi on aarch64
Propose secure_boot by default only on x86_64