Fix an authentication bypass bug in SMP

When an OOB pairing with secure connections initiated
from remote, authentication can be bypassed. This change
fixes it.

Bug: 251514171
Bug: 321271585
Test: m com.android.btservices
Test: manual run against PoC
Ignore-AOSP-First: security
Change-Id: I5b79d58cb8915415a96a9ef7deafa2f1fc4d7056