Add "unlocked device required" keystore API
am: 9371e95bb0

Change-Id: If9dd8570d0b7f6ba1594391be9e5283be9a930db