Make carrier config service binding file-encryption aware.

When the system is not yet unlocked, it should only bind to the service
that is marked as file-encryption aware. It should reevaluate bindings
after system is unlocked.

Bug: b/27380116
Design: go/carrier-config-binding-fbe

Change-Id: Id35102209ded0d84614a076dc649c8eb3516a2af
1 file changed