work in progress for kexec on locked bootloaders