CONFIG_RANDOM_TRUST_BOOTLOADER = FAIL: "y" CONFIG_SECURITY_LOCKDOWN_LSM = OK CONFIG_SECURITY_LOCKDOWN_LSM_EARLY = OK CONFIG_LOCK_DOWN_KERNEL_FORCE_CONFIDENTIALITY = FAIL: "is not set"
