Split out derived device keys into separate prod/dev groups

[Thealexbarney]

This fixes an issue where reading certain device keys/seeds would result in dev derived keys instead of prod derived keys