SbatLevel

• Base set at shim build time
• Can be advanced further
• So you can add stricter blocking
• Currently we set
• shim,4
• grub,5