efi_loader: correct determination of secure boot state