[fsflover]

> not having a solution to encrypt our disks and hibernate under Secure Boot

Did you consider coreboot with Heads and a hardware key instead?

[yourapostasy]

Thank you Kind Internet Stranger!