for (AbstractToken token : tokens) {
if (!isTokenRequired(token, message)) {
continue;
}
DerivedKeys derivedKeys = token.getDerivedKeys();
setDerived(derivedKeys == DerivedKeys.RequireDerivedKeys);
boolean processingFailed = false;
if (token instanceof KerberosToken) {
if (!processKerberosTokens()) {
processingFailed = true;