Merge "Only auth via FP when device is locked, when Assistant is on top" into oc-mr1-dev