Add ability to specify a reference to an absolute URI in the derived key functionality

Currently, WSSecDKSign and WSSecDKEncrypt only allow references using a relative URI. This is problematic for the case of refering to a SecurityContextToken via the wsc:Identifier, which must be an absolute reference.