All functions explained inside the manual. You better spend some time to read it.How exactly does one turn on protectsecureboot in config.plist ?
e.g. For
ProtectSecureBoot
The actual usage also demonstrated inside the sample config.
Therefore, after your read the manual, you can copy the key from the sample config to your own config.plist (if the key isn't there yet). Then modify the value to what you need.
e.g. If you want to turn on ProtectSecureBoot