Merge changes from topic "face-challenge-bug" into qt-r1-dev

* changes:
  Make recalibration notification VISIBILITY_SECRET
  Unlocking children profile must pass on existing challenge
  LSS must check canAuthenticate(userId) for correct user/profile
  Add much needed logging for face auth challenge / lockout path