[PATCH v3 0/2] boot: don't enable the non-secure boot commands by default if secure boot enabled