Whether to use hardware-backed storage, such as Android Keymaster or Apple's Secure Enclave.
Whether a StrongBox TPM is required.