SecureBoot support

We now have our own shim signed by Microsoft, yeah!!
revert to Linux 3.12 because the nvidia drivers are still incompatible with 3.13