(PUP-3114) Added an enforcement for FIPS

FIPS mode requires that the keylength be restricted to 2048 bits instead
of the new standard 4096.

This patch provides that proper enforcement.
I don't think we want to automatically downgrade keylengths based on a fact value. Can't this be accomplished by setting the keylength property?