* The JDK Reference Implementation additionally uses the
* {@code jdk.security.provider.preferred} property to determine
* the preferred provider order for the specified algorithm.

Which property is it? java.security.Security or java.lang.System?

It's the former, but the spec isn't clear.

This needs to be updated throughout the APIs where this was added.