Make sure mokutil reports actual Secure Boot status even if not running under systemd