Feature Overview (aka. Goal Summary)  

In order to meet compliance / security goals, customers want to secure the Grub bootloader password in order to protect from malicious actors.

This includes preventing users from gaining root access on systems by editing the GRUB config / kernel arguments or booting a previous version of the OS with a known vulnerability for example.

Goals (aka. expected user outcomes)

It should be possible to set and change the grub password via MachineConfig.