PEPify grub