running_under_secureboot: update for efivarfs + new mokutil behavior