Strengthen validation of end-entity key usage when present#15018

sjudson wants to merge 3 commits into

pyca:mainpyca/cryptography:mainfrom

trail-of-forks:sj/keyusagetrail-of-forks/cryptography:sj/keyusageCopy head branch name to clipboard