Trying to configure server to run in FIPS mode using subsystem capabilities.

I can't configure throught subsystem same as in java.security file:

security.provider.5=com.sun.net.ssl.internal.ssl.Provider  SunPKCS11-testPkcs

because there is no possibility in subsystem to call provider constructor with arguments (I don't mean providers configuration)

Subsystem implements provider loading in 2 steps

• create provider instance (call noargs constructor)
• optionally load configuration

But to create com.sun.net.ssl.internal.ssl.Provider in FIPS mode constructor with arguments must be called [1]

[1] http://grepcode.com/file/repository.grepcode.com/java/root/jdk/openjdk/8u40-b25/com/sun/net/ssl/internal/ssl/Provider.java#49