@Override
    public JcePrimitiveT getInstance(String algorithm, List<Provider> preferredProviders)
        throws GeneralSecurityException {
      // Ignores preferred provider, as we don't allow overruling the policy.
      return getInstance(algorithm);
    }
The FIPS policy, only allows Conscrypt as a provider. No other provider will be used, and any
preferred provider will be ignored.
java_src/src/main/java/com/google/crypto/tink/subtle/EngineFactory.java