@cobratbq I was trying to get the holy grail of setups working: secure boot, kernel lockdown mode, encrypted swap and hibernation. Seems not yet possible, but S0ix states seem to work pretty well. Too bad they are hidden away under a strangely labeled BIOS setting: "Block Sleep (S3)". Technically, S0ix is not S3, but there seems to be a lot of mislabeling.