How do you validate that you're on a machine running secure boot? How about when you connect remotely?
That sounds suspiciously like a human problem and not a technical one. In other words, humans configured the server, not a machine.
But, humans forget sometimes... and for that `mokutil --sb-state` will save the day.