Prevents execution of OEM software that ships through the UEFI's firmware.