Secure Boot GRUB template: be more dynamic + don't overwrite with empty variable