efi: vars: prohibit reading random seed variables