blinding_derivation_key should be generated in HD path

Currently all keys except the blinding derivation key are generated via HD wallet. Using `GenerateNewKey` would enable HD derivation of that key making backups easier, and would allow us to keep it encrypted like any other key when not in use.