PeerFilterProvider methods are called with the lock already held, so just assert on that instead of locking again.
Add method to derive new keys when queried by path

Added DeterministicKeyChain.getKeyByPath(List, boolean) allowing to
specify whether to create non-existing key or not