prepareCipherForDecrypt
Creates a cipher initialized for decrypting the authorization store file.
Call this to get a cipher, then authenticate it via BiometricGate, then pass it to warmCache or query methods.
Return
Cipher ready for BiometricGate authentication, or null if no file exists