Add KM_TAG_ALLOW_WHILE_ON_BODY.

Change-Id: I39ca0eee8be46a6acc65e975aad81d2f2c2aa5b8
diff --git a/include/hardware/keymaster_defs.h b/include/hardware/keymaster_defs.h
index 5b5d2ec..fd53adf 100644
--- a/include/hardware/keymaster_defs.h
+++ b/include/hardware/keymaster_defs.h
@@ -109,6 +109,9 @@
                                                    If absent, authentication is required for every
                                                    use.  Authentication state is lost when the
                                                    device is powered off. */
+    KM_TAG_ALLOW_WHILE_ON_BODY = KM_BOOL | 506, /* Allow key to be used after authentication timeout
+                                                 * if device is still on-body (requires secure
+                                                 * on-body sensor. */
 
     /* Application access control */
     KM_TAG_ALL_APPLICATIONS = KM_BOOL | 600, /* Specified to indicate key is usable by all