Using the new cipher_disable hwsim option we can disable CCMP support but require it on the AP. This should result in a Not Supported error.