https://www.omgubuntu.co.uk/2012/09/ubuntu-to-use-signed-grub2-bootloader-for-secure-boot