security-extension: add condition to run the start script only at boot

fix bug where start script for the ACS was running at both boot and
reboot-- add condition to look for "start" arg

Signed-off-by: Stuart Yoder <stuart.yoder@arm.com>