Change withdrawal.sign() to lookup the master private keys from the votingpool DB and derive the ones necessary to sign transactions

But is it necessary to embed it, since it has the side-effect of making it public?