Device transfer might fail if trust anchors provided use unsupported encryption key lengths

[jflevesque-genetec]

As issue 216 raised in the cloud profile working group, this raised the issue that trying to transfer a device using a MCS to an OCS with trust anchors that might not be supported by the device (ex. 2048 cert but device supporting only 3072 and up). Might need to update the spec to force the MCS to drop/skip trust anchors that are not supported by the device.

[cpiette-gen]

This might not be needed. If the security baseline is mandating 3072 and up, the MCS to OCS transfer should adhere to this requirement when doing the transfer.