Add protected method to authenticate using BP for a specific user

This is analogous to one of the FingerprintManager internal APIs. A
signature permission is required if a user wants to authenticate
using a different userId

Bug: 119296586

Test: BiometricPromptDemo still works for primary and work profile

Change-Id: I16383a588833ccf673d62ed1fc580c412beb4929