The bootloader section from autoinst.xml:
> <bootloader t="map">
> <global t="map">
> <append>preempt=full mitigations=auto security=apparmor console=ttyS0,115200 console=tty0</append>
> <cpu_mitigations>auto</cpu_mitigations>
> <gfxmode>auto</gfxmode>
> <hiddenmenu>false</hiddenmenu>
> <os_prober>false</os_prober>
> <secure_boot>true</secure_boot>
> <terminal>gfxterm</terminal>
> <timeout t="integer">8</timeout>
> <update_nvram>true</update_nvram>
> <xen_kernel_append>vga=gfx-1024x768x16</xen_kernel_append>
> </global>
> <loader_type>grub2-efi</loader_type>
> </bootloader>