This commit adds a second condition to whether the device is expected to have the tunnel mode feature. If a device's first API/launch version is Q or above, require IPsec tunnels Bug: 72950854 Test: Ran on device with first API level < Q and == Q. Change-Id: I7b849ad24a04b6b7899a80f1856236b5ceb5a839