keymaster: Check system_state if provisioning is allowed

This adds a dependency on the system_state server. If this changed is
merged into a project that uses the previous keymaster provisioning
scheme, then a system_state server will need to be added that returns
SYSTEM_STATE_FLAG_PROVISIONING_ALLOWED_VALUE_ALLOWED_AT_BOOT for
SYSTEM_STATE_FLAG_PROVISIONING_ALLOWED. This can be done by adding:

TRUSTY_BUILTIN_USER_TASKS += \
	trusty/user/base/app/system_state_server_static \

STATIC_SYSTEM_STATE_FLAG_PROVISIONING_ALLOWED := 2

to the top project .mk file.

Bug: 154033394
Change-Id: I72e227557cc8f9b5c8d1670337d14799ca3bc830
2 files changed