seems like we need secure boot usb keys we can inspect better than this