Sorry, I mis-spoke. SJVN corrected me: "I've never heard of an x86 OEM that doesn't allow secure boot to be turned off, Some do make it almost impossible to figure out how." (https://twitter.com/sjvn/status/302093489347375107)