allow secure boot if not enforcing it
allow secure boot if not enforcing it

We check the secure boot containers no matter what, only *enforcing*
secure boot if we're booting in secure mode. This gives us an extra
layer of checking firmware is legit even when secure mode isn't enabled,
as well as being really useful for testing.

Signed-off-by: Stewart Smith <ec31ab75ddf977353c8f660f92ea8b23f64aef25@linux.vnet.ibm.com>

open-power/skiboot,qemu/skiboot,legoater/skiboot,qemu/skiboot,legoater/skiboot,shenki/skiboot,qemu/skiboot,shenki/skiboot,open-power/skiboot,open-power/skiboot,legoater/skiboot,stewart-ibm/skiboot,qemu/skiboot,legoater/skiboot,qemu/skiboot,stewart-ibm/skiboot,open-power/skiboot,stewart-ibm/skiboot,shenki/skiboot,shenki/skiboot,open-power/skiboot,shenki/skiboot,legoater/skiboot