{
  my.features.boot.secureBoot.enable = true;
  my.features.boot.storageCrypto.enable = true;
}