KAS now supports key rotation so we need to have the ability to add the kid to the key access object when generating a new ztdf.