Your docs state
Android Keystore is only useful when you want to require user authentication for key use
but your implementation looks like it would need a complete rewrite of the AndroidKeystoreKmsClient.java to be able to handle user authentication for key use.
Is that intended? Or is there an easy way around the limitations of the existing implementation?