discover/device-handler: Prevent normal users changing boot target