When attempting to allow a new MacBook to boot from a USB installer you have to go into the built-in recovery to allow to boot from usb using the 'Startup Security Utility". When doing so you may get this error. To fix it open terminal then run the following command and hit enter.
sysadminctl interactive -secureTokenOn wav -password <user password>
Fill in the appropriate user password where the code above says <user password>
Once done successfully you can boot back into recovery to allow to boot from a USB installer.