Implement alternate SE root-of-trust provisioning. am: fdeafb864c am: 182303c6d7 am: fac58ffd48 am: e2a46ccb6f

Original change: https://googleplex-android-review.googlesource.com/c/platform/system/keymaster/+/18638885

Change-Id: Ib599538ce5f1a8b3552208b9521f3b7cf52879d7
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>