More Kernel command-line checks

[rusty-snake]

• intel_iommu=on
  • pass if value is on
  • pass if CONFIG_INTEL_IOMMU_DEFAULT_ON is y
  • skip if non-intel?
  • fail otherwise
• lockdown=confidentiality
  • pass if value is confidentiality
  • pass if CONFIG_LOCK_DOWN_KERNEL_FORCE_CONFIDENTIALITY is y
  • fail otherwise
• module.sig_enforce=1
  • pass if value is 1
  • pass if CONFIG_MODULE_SIG_FORCE is y
  • fail otherwise
• efi=disable_early_pci_dma
  • pass if value is disable_early_pci_dma
  • pass if CONFIG_EFI_DISABLE_PCI_DMA is y and value is not no_disable_early_pci_dma
  • fail otherwise