If an implementation of NONEwithRSA is not available, we wrap an instance of the RSACipher and use that to do the signature. There's some wrapper magic that happens here. If we call getInstance("NONEwithRSA").getProvider(), we get delegated down into "SunJCE". But if we call getInstance("NONEwithRSA", "SunJCE"), we get *NULL*, not a no-such algorithm. This needs to be cleaned up.