Document user authentication restrictions on public keys.

A Keystore bug causes user authentication to be required to use public
keys from key pairs that are authentication-bound.  Because it's too
late to fix Keystore we're instead documenting the behavior.

Bug: 23792178
Change-Id: Iee3a78d6cbf25949e890b1c50841580ce748da2e