Wrap KeyPair by DerivedSigningPubkey