It MUST be used when the key usage is authorized by the mobile operating system using a biometric factor.