user manifest unlocked for uboot (untrusted boot). minor refactoring