title: IOS not able to create privatekey if only devicecode is set on device?
body: <p>Im trying to generate a privatekey that only is accessible when either devicecode or current set of biometrics( that is already registered on device) is used.</p>
  
  <p>It works when i have a finger registered on device, then its all good. But if i delete my registered "touchid-finger", and try to generate a new key, then it returns nil </p>
  
  <p>Errorcode is -25293</p>
  
  <p>Code example:</p>
  
  <pre><code>func generateKey() -&gt; SecKey?{
      var error: Unmanaged&lt;CFError&gt;?
      let accessControl = SecAccessControlCreateWithFlags(
              kCFAllocatorDefault,
              kSecAttrAccessibleWhenUnlockedThisDeviceOnly,
              [.devicePasscode,.or,.biometryCurrentSet],
              nil)
  
      let attributes:[String : Any] = [kSecAttrType as String: kSecAttrKeyTypeRSA,
      kSecAttrKeySizeInBits as String:4096,
      kSecPrivateKeyAttrs as String: [
        kSecAttrIsPermanent:true,
        kSecAttrCanSign: true,
        kSecAttrApplicationTag: "yes.its.my.tag",
        kSecAttrAccessControl:accessControl!]]
        let privateKey = SecKeyCreateRandomKey(attributes as CFDictionary, &amp;error)
       if(error != nil || privateKey == nil) {
        fatalError("explode Kittens")
       }
       return privateKey
  }
  </code></pre>
  
  <p>fyi.Its actually works on simulators but not on real devices.</p>
  
  <p>Am i doing something wrong? Is this working as intended? is it a bug? (sooo many questions :D )</p>