K 10
svn:author
V 3
sjg
K 8
svn:date
V 27
2019-07-17T23:33:14.477235Z
K 7
svn:log
V 357
loader: ignore some variable settings if input unverified

libsecureboot can tell us if the most recent file opened was
verfied or not.
If it's state is VE_UNVERIFIED_OK, skip if variable
matches one of the restricted prefixes.

Reviewed by:	stevek
MFC after:	1 week
Sponsored by:	Juniper Networks
Differential Revision:	https://reviews.freebsd.org//D20909

END