Merge "CDD: Add recommendations for Verified Boot" into oc-dev