[tip: x86/urgent] x86/boot: Preserve boot_params.secure_boot from sanitizing