Add an option for disabling Windows Hello

[dmulder]

This makes sense in public facing situations, such as when the host has a public facing IP. Otherwise a Hello PIN could be brute forced.

Fixes #

Checklist

• [ ] This pr contains no AI generated code
• [ ] cargo fmt has been run
• [ ] cargo clippy has been run
• [ ] A functionality test has been added
• [ ] make test has been run and passes