Perhaps it's time for it to become a reactive target. It's an HP, so perhaps it's really ALWAYS been that time...

And, this is exactly what secure boot was designed to do.