Change withdrawal.sign() to lookup the master private keys from the votingpool DB and derive the ones necessary to sign transactions

Indeed, leftover from a two-line XXX comment. Removed