should catch NoSuchPaddingException as well ... to re-try cipher with all providers
allow to force provider registration with **-Djruby.openssl.provider.register=true**
no need to close StringReader + rescue IOException since PEMIO should only fail that
some mangling trying to handle getCipher in a more smart way "around JCE limits" :

- if the jar is on the boot class-path we're likely get a *java.lang.SecurityException: JCE cannot authenticate the provider BC* (`java -cp ... -ropenssl`  works differently than `jruby -S`)

- fooling around with reflection might not help us either if JCE considers our "caller" not trusted ... ends up with *java.lang.NullPointerException at javax.crypto.Cipher.<init>*

we make sure cases above are catched and "quickly" fall to `Cipher.getInstance(String)`