check_signatures

This variable controls whether GRUB enforces digital signature validation on loaded files.