It seems it isn't possible to enable secure boot and disable lockdown any more more with sysrq alt x. In any case. Can anyone save me the time to come up with a grub cmdline to restore as much of the kernel lockdown as possible e.g. debugfs=off, signed modules, disable kexec whilst keeping hibernate working (I understand the security reasoning). Thank you