Skip: isNewInstanceTest nPVM/without Secretkeeper

Non protected VM using legacy Secret mechanism do not reliably implement
the isNewInstance. This is because, in case of legacy mechanism, pVM
would rely on pvmfw to set the appropriate DT property. But
non-protected VM, pvmfw is never run.

Note that is possible to implement this for nPVM - for e.g., by checking
if there is already existing saved data in Microdroid partition in
instance.img. We disable the test first as mitigation.

Test: NA
Bug: 389030806
Change-Id: I5510c56de90fd001a78249504a599df0f9cb5aa2
diff --git a/tests/testapk/src/java/com/android/microdroid/test/MicrodroidTests.java b/tests/testapk/src/java/com/android/microdroid/test/MicrodroidTests.java
index a50ce98..8502ec3 100644
--- a/tests/testapk/src/java/com/android/microdroid/test/MicrodroidTests.java
+++ b/tests/testapk/src/java/com/android/microdroid/test/MicrodroidTests.java
@@ -1954,6 +1954,11 @@
         assumeFalse(
                 "Cuttlefish/Goldfish doesn't support device tree under /proc/device-tree",
                 isCuttlefish() || isGoldfish());
+        if (!isUpdatableVmSupported()) {
+            // TODO(b/389611249): Non protected VMs using legacy secret mechanisms do not reliably
+            // implement `AVmPayload_isNewInstance`.
+            assumeProtectedVM();
+        }
         VirtualMachine vm = forceCreateNewVirtualMachine("test_vm_a", config);
         TestResults testResults =
                 runVmTestService(