Derive a new subkey (from SECRET_KEY) for SRS