fix(platform)!: ensure correct critical security level for token transitions and allow any security level key in signing if allowed to do so with options#2597