Improve documentation about secure boot
    
    Update the text to reflect that fact that simply binding to PCR 7
    (the secure boot state) is insufficient; that we additionally need
    to make sure that the system is being unlocked from a trusted
    initrd.