I don't think this policy is sophisticated enough for general use. Ie. clients who set this might end up breaking the HTTP client because certain types of retries are necessary. For example, OkHttp is aggressive about using advanced TLS options, and if this is disabled then we can break on certain servers.