Add `rd.shell=0` and `rd.emergency=reboot` to commandline

[HarryR]

https://pulsesecurity.co.nz/advisories/tpm-luks-bypass

---

This isn't a concern for us because we're not using dracut...