Custom SecurityProvider breaks on EAP 7.4.17+ and EAP 8.0.0

Issue

• We have an app with a custom security provider that depends on delayed provider selection. This breaks after updating to EAP 7.4.17+ or 8.0.0+ and security debug shows delayed provider selection is disabled as a result of org.apache.xml.security.algorithms.implementations.SignatureBaseRSA disabling delayed provider selection:

 Signature: Signature.init() not first method called, disabling delayed provider selection 
 java.lang.Exception: Debug call trace 
        at java.security.Signature$Delegate.chooseFirstProvider(Signature.java:1054) 
        at java.security.Signature.getProvider(Signature.java:436) 
        at org.apache.xml.security.algorithms.implementations.SignatureBaseRSA.<init>(SignatureBaseRSA.java:64) 
        at org.apache.xml.security.algorithms.implementations.SignatureBaseRSA.<init>(SignatureBaseRSA.java:57) 
        at org.apache.xml.security.algorithms.implementations.SignatureBaseRSA$SignatureRSASHA1.<init>(SignatureBaseRSA.java:207)