Comment 7 for bug 2054127

Disabling unloading in secure boot mode sounds like a good idea to me.

Your comment about "allow exiting grub without resetting the system" makes me wonder if we strictly need that feature, too. I can see some sense to "once you're in grub you either have to boot the next operating system or you have to reboot". Anything else would allow whatever functionality is in grub to change UEFI context that might mess with some other operating system, right?

Thanks