[seL4] Deriving and Revoking IRQControl caps