shim: debconf-is-not-a-registry usr/sbin/update-secureboot-policy
