We are comparing against the existing 'master passcode' at this point, so we should be able to make this user-agnostic. The call made to this method should only be made if it is determined that the policy has really changed such that a 'master passcode' is no longer required. Basically, in today's flow, this is never going to happen, unless we implement the downgrade scenario upon logout, where the lone user who had PIN policies enabled has logged out, and we recompute and determine that a passcode is no longer required.