Setting the policy controls which local authentication factors can be used for both login and reauthentication on Google ChromeOS.
To allow:
* Every local authentication factor, use ["ALL"] (includes factors added in the future).
* Only PIN, use ["PIN"].
* Only Local Passwords, use ["LOCAL_PASSWORD"].
If the policy is unset or set to an empty list, no local auth factors are available for managed users.