Clear identity in LockSettingsInternal.getUserPasswordMetrics

It is an implementation of LockSettingsInternal API which
is callable only within system server, so permission check
seems unnecessary.

Bug: 256170784
Bug: 268313443
Test: manual with TestDPC
Change-Id: I123402351ed1e69bea9a2496a07fd57e6d467e14