Switch to new DataProtection KeyDerivation API