OPENQA_SECUREBOOT enables it.
only in combo with INSTALLATION!
use fedora's uefishell iso to enroll keys and enable secureboot