[ Merge of http://go/wvgerrit/140934 ]
It was assumed that L1 would be tried before first reverting to L3 when
performing OTA keybox provisioning. If an app automatically defaults
to L3, it may get into a provisioning loop if the device wants to
perform keybox provisioning.
Now, OpenSession() will check the security level before suggesting OTA
keybox provisioning back to the app.
Bug: 187646550
Test: Manual tests on Android
Change-Id: Icd8f0915b0cc0d06c545b43bf8c1ccac793ce0b2
67d7e895e2