CONFIG_PROTECT="/boot/config.txt /boot/cmdline.txt"