iOS Secure Enclave key persistence: re-enrollment to factory reset

Secure Enclave keys survive some events, not others, in ways the docs miss. A tested matrix: Face ID re-enrollment, lockout, restore, factory reset, OS upgrade.