@Override
    public JcePrimitiveT getInstance(String algorithm, List<Provider> preferredProviders)
        throws GeneralSecurityException {
      // Ignores preferred provider, as we don't allow overruling the policy.
      return getInstance(algorithm);
    }
The Android policy always prefer Conscrypt as a provider, but allows to fallback on the JDK
behavior if these are not available. Preferred providers will be ignored.
java_src/src/main/java/com/google/crypto/tink/subtle/EngineFactory.java