[devicelock] Add API for services to directly request permission for actions. Contributes to JB#40880
This allows a service to directly ask prompt the user to confirm it
should perform an action on behalf of an application. Or for a user
session service to act as an agent for another authentication service
such as polkit.