Add DeriveKey to ock and icsf token.

Signed-off-by: Debora V Babb <dvelarde@us.ibm.com>
Signed-off-by: Joy Latten <latten@linux.vnet.ibm.com>