installer/main.sh: Check kernel verification before setting dev_boot_signed_only=1.