The 3 settings corresponding to iOS doc at https://developer.apple.com/documentation/security/secaccesscontrolcreateflags/1392879-userpresence, which meant
* Any enrolled fingers, or Face ID
* Only the current enrolled finger, or face ID
* Biometric or passcode.