s390/zcrypt: Support for CCA protected key block version 2