DSS-388: KeyUsage constraint added