requireFreshAuthNext

Force the next loadSeed to prompt for biometric (called by session lock).