Change withdrawal.sign() to lookup the master private keys from the votingpool DB and derive the ones necessary to sign transactions

Not necessary to embed it, but it is convenient and txstore.Credit
(which we were using directly before) is public anyway, so I don't think
it's a problem to have it public