soc/intel/cannonlake: Allow coreboot to handle required chipset lockdown