Enable the recovery config.txt options to revoke the ROM
development key which permentantely locks the device into
secure-boot mode.

WARNING: This also prevents the bootloader from being downgraded
to older releases which don't support secure-boot.