tree e53cf919582daa93b677af5022aba8c0f00d6e79
parent a0a718f5db03447dd5e7e660ee57506b907e880d
author Adrian Roos <roosa@google.com> 1470874195 -0700
committer Adrian Roos <roosa@google.com> 1470877292 -0700

Only disable trust agents after lockout

Previously trust agents would be disabled even after one
wrong attempt. Now we wait for the cooldown (usually 5 attempts),
the same as fingerprint.

Also adds a TrustArchive entry of when device policy changes are sent to
trust agents.

Bug: 30037948
Change-Id: I9e284d994ddae45ef66b5b8b601297c63d8ba667