[coreboot-gerrit] Change in coreboot[master]: boot_device: Add boot_device_lockdown