Draft: Add UEFI secure boot option.
The @uefi machine will have secure boot activated. The @uefi_no_secure_boot machine uses UEFI, but without secure boot.
This will not work out-of-the-box.
The file ovmf-x86_64-smm-ms-code.bin and ovmf-x86_64-smm-ms-vars.bin need to be copied from an openSUSE instance from the folder /usr/share/qemu to the Debian instance in the folder /usr/share/OVMF. The Debian secure-boot UEFI images have a high priority for the EFI shell. The CDROM and HDD images have a lower priority and will therefore not boot automatically.