Add support for GPG signature enforcement on booted