Tests to implement include:

TLS server disables ciphersuites via wildcards (e.g., TLS_ECDH*WITH_AES_256_GCM_*) and client tries to negotiate those suites.

Set `jdk.tls.disabledAlgorithms` to "TLS_.*" and verify no cipher suites are disabled.