diff --git a/root/etc/grub.d/09_credentials b/root/etc/grub.d/09_credentials
new file mode 100755
index 0000000..b033251
--- /dev/null
+++ b/root/etc/grub.d/09_credentials
@@ -0,0 +1,13 @@
+#!/bin/sh
+exec tail -n +3 $0
+
+# Setup GRUB credentials so that it isn't possible for anyone to change the
+# boot parameters or use the command line, unless they know user/password pair
+#set superusers="admin"
+#password admin [unsafe plaintext password]
+#password_pbkdf2 admin [safe grub-mkpasswd-pbkdf2 password]
+
+
+# Make OS Entries unrestricted, so that they can be booted into without prompting
+# for user/password pair set above
+#menuentry_id_option="--unrestricted $menuentry_id_option"
diff --git a/root/etc/grub.d/40_custom b/root/etc/grub.d/40_custom
index 36bc370..f6fb8dc 100755
--- a/root/etc/grub.d/40_custom
+++ b/root/etc/grub.d/40_custom
@@ -9,3 +9,4 @@ if [ ${grub_platform} == "efi" ]; then
 		fwsetup
 	}
 fi
+