support key id in ztdf key access object

[strantalis]

KAS now supports key rotation so we need to have the ability to add the kid to the key access object when generating a new ztdf.