IssueTracker

Issue summary:
Customer like to setup Google Cloud HSM as a provider for encryption.

AWS seems to allow us to have the AWS Cloud HSM as a provider as mentioned in [1] and [2].

Security.addProvider(new com.cavium.provider.CaviumProvider())
In the samples from GKE however we seem to only have bouncy castle as a provider. See here [3]

Security.addProvider(new BouncyCastleProvider());

Customer would like to do a initsign as below JCA API

https://docs.oracle.com/javase/10/docs/api/java/security/Signature.html#initSign(java.security.PrivateKey) 

[1] https://aws.amazon.com/cloudhsm/?sc_channel=PS&sc_campaign=acquisition_CA&sc_publisher=google&sc_medium=ACQ-P%7CPS-GO%7CBrand%7CDesktop%7CSU%7CSecurity%7CCloudHSM%7CCA%7CEN%7CText&sc_content=aws_cloud_hsm_e&sc_detail=aws%20cloud%20hsm&sc_category=Security&sc_segment=293598973587&sc_matchtype=e&sc_country=CA&s_kwcid=AL!4422!3!293598973587!e!!g!!aws%20cloud%20hsm&ef_id=EAIaIQobChMInpbUrbLe3wIVVRx9Ch0VNQW0EAAYASAAEgIxEfD_BwE:G:s

[2] https://github.com/aws-samples/aws-cloudhsm-jce-examples/blob/master/src/main/java/com/amazonaws/cloudhsm/examples/AESGCMEncryptDecryptRunner.java

[3] https://github.com/GoogleCloudPlatform/java-docs-samples/blob/master/kms/src/main/java/com/example/Asymmetric.java