A Windows VM with secure boot only accepts Windows signed driver. So, it
doesn't accept the widely used VirtIO driver from Red Hat. The VM only
accepts the VritIO driver from Oracle. Instead of setting the subvendor
id of each VirtIO device separately, create a single config option to
change it.
The use case for secure boot is Windows 11. It requires secure boot.