firmware feature 'enrolled-keys' cannot be enabled when firmware feature 'secure-boot' is disabled