removed pin from keychain, added masterpublickey so it can have different keychain auth policies from seed