Most of the security provider libraries get loaded from the java extension directory. In a misconfigured environment, one can end up loading old security provider code if the extension directory points to a different JRE installation directory.

We should flag such incidents