Correctly include keys for referenced encrypted DCPs in KDMs (#975).