Most common distributions turn it on when running on a device with UEFI Secure Boot enabled.