Change withdrawal.sign() to lookup the master private keys from the votingpool DB and derive the ones necessary to sign transactions

Good question, but I think since txstore.Credit is public it will
invariably be public when we embed it