Extend consistency checker to check client and server SSLEngines separately.
Check for unrestricted JCE policy on startup and warn (as it can mask cipher suites using > 128 bit security algos).