[RFC PATCH v7 14/16] scripts: add boot policy generation program