base: add Trust usb restrictor

This is a squash of following commits:

Author: Joey <joey@lineageos.org>
Date:   Wed Jan 9 22:22:46 2019 +0100

    base: add Trust usb restrictor

    Change-Id: Ie2cb8e91d0f13f0d1473a48d22839b378701c756
Signed-off-by: Joey <joey@lineageos.org>

Author: Han Wang <416810799@qq.com>
Date:   Fri Jun 7 08:30:54 2019 +0200

    KeyguardStateMonitor: Don't get IUsbRestrict service in constructor

     * If boot up is "too fast" and Trust HAL starts a bit slowly,
       we may end up getting a NULL IUsbRestrict service in
       constructor. This causes a NPE later in onShowingStateChanged().

     * To avoid this, we just try to get IUsbRestrict service in
       onShowingStateChanged(). This adds a little overhead, but prevents
       possible crashes.

    Change-Id: Idc09cc1700aad8753244789a1f14ea1d5267f77c

Change-Id: Idc09cc1700aad8233244789a1f14ea1d5267f223