AFTER_FIRST_UNLOCK

Whenever the device has been unlocked once since it started: file-based encryption's credential-encrypted storage alone, as iOS's "until first user authentication". For an app that must read credentials while locked.