BIOMETRY_CURRENT_SET

Require a Class 3 (strong) biometric from the currently enrolled set.

Adding a new biometric or removing all biometrics invalidates the private key. This is the default enrollment policy and the only policy supported for session reverification.