Merge changes from topic "offbody-key-expiration" into main

* changes:
  Remove onDeviceOffBody()
  Document that setUserAuthenticationValidWhileOnBody() doesn't actually work