Add OP_AUTH_NEEDED KeyStore result code

OP_AUTH_NEEDED will be returned from begin when an operation needs
a per operation authentication before calling update. Note that the
begin call succeeds when this error is returned, the token and handle
are valid.

Change-Id: I28953add4ffd7d873fc33ba3f2cf788f72b07d06