Add OP_AUTH_NEEDED KeyStore result code

OP_AUTH_NEEDED will be returned from begin when an operation needs
a per operation authentication before calling update. Note that the
begin call succeeds when this error is returned, the token and handle
are valid.

(cherry picked from commit dabe520a)

Change-Id: I0ba4e997360843b5eb6c1db9c5fcd1c4d5a2c717