Set image protection policy. The policy is bitwise.
If a bit is set, the image will be protected by DxeCore if it is aligned.
The code section becomes read-only, and the data section becomes non-executable.
If a bit is clear, nothing will be done to image code/data sections.

BIT0 - Image from unknown device.

BIT1 - Image from firmware volume.

Note: If a bit is cleared, the data section could be still non-executable if
PcdDxeNxMemoryProtectionPolicy is enabled for EfiLoaderData, EfiBootServicesData
and/or EfiRuntimeServicesData.

Set image protection policy.
0x80000002 | 0x00000000 - 0x0000001F

PCD Information

Name	Token Space	Token number	Data Type	Default Value
PcdImageProtectionPolicy	gEfiMdeModulePkgTokenSpaceGuid	0x00001047	UINT32	0x00000002