properly clean up after oem and regular !secureboot install tests

this was previously removed supposedly because I wanted to use the
workspace as permanent storage. I've since moved to a system which archives
images into a central storage. so we need the cleanup again lest we
leak workspaces