strongBox
Whether to back this key with a StrongBox secure element.
REQUIRED: use StrongBox; key generation fails if the device lacks StrongBox or the algorithm/params are unsupported.
PREFERRED (default): use StrongBox if available and it supports the requested algorithm/params, otherwise transparently fall back to the TEE.
DISCOURAGED: do not use StrongBox.