This turns into kind of an asynchronous `if/else` block.  We want to check whether a passcode needs to be created or changed at this point.  But if it doesn't, we still want to attempt a passcode verification or lock, subject to our previous restrictions like mandatory lock at app launch, etc.