Comment 3 for bug 1995751

This is a reintroduction of bug 1928674 because Steve fixed that locally in a grub2-unsigned upload in bionic that got overriden by a binary copy again because everybody forgot about that and you don't see it in testing because the conffiles stay around after upgrades I suppose.

We should move the files to grub2-common instead of reintroducing them in grub-efi-amd64 because while that's easier to reintroduce there, it's also more likely to get screwed up by more security uploads.