Secure Boot: update grub and shim binaries