desktop/grub: don't require password for normal boot