Mandatory Biometrics - Framework

Added a bit to correspond to Mandatory Biometrics for canAuthenticate
API
Drop device credential when mandatory biometrics is enabled and user is
outside trusted locations

Flag: android.hardware.biometrics.Flags.MANDATORY_BIOMETRICS
Test: atest PreAuthInfoTest BiometricServiceTest
Fixes: 339910180
NO_IFTTT=only change in condition to check for permission

Change-Id: I1574d6ffb8fd35fca93be6ea167a7937ff64b8a7