grub2 has support for authentication to access the boot menu. This creates the ability to lock down the kernel boot options so they cannot be tampered with. We should add support for such functionality to boot-update. See:

https://www.gnu.org/software/grub/manual/grub/html_node/Authentication-and-authorisation.html#Authentication-and-authorisation