[coreboot-gerrit] Change in ...coreboot[master]: soc/ucb/riscv: Protect CBFS from payload loader