Use dukgenerator instead of the _DeviceKeyGenerator for the PrivateKey encryption