IsUVPAA currently always returns false in Incognito mode. We should allow platform authenticator use in incognito in a way that (1) doesn't violate incognito expectations and (2) does not introduce incognito detection gadgets.