Comment 4 for bug 1571388

There is still some work needed here; update-secureboot-policy may prompt in the wrong cases. Moving to 'ubuntu-17.05', since it's not the principal focus while scrambling to release Zesty.

Most of the required work here is going to be to properly handle /proc/sys/kernel/moksbstate_disabled and /proc/sys/kernel/secure_boot in update-secureboot-policy; and all of it will be done in the shim-signed package.