[[!meta title="TODO"]]

- Always diff grub.cfg.
- Implement per image/device signature checking.