default hidl CryptoPlugin: security fixes * reject native handle output for clearkey * validate subsample sizes Bug: 137370777 Test: cryptopoc Change-Id: Idf075e1a297fe1ab3ea3e1621806dd46b4a51e35 (cherry picked from commit 1e18883b72351531e4a11df49fffc0454e9108b8)