Dropped part of the efi-lockdown patchset for IMA until conflicts get resolved.
645ff1e8e704c4f33ab1fcd3c87f95cb9b6d7144