Maybe we should use here the (master) publickey alone, to not provide any hints on the extension bits.