Extended private key corresponding to ypub for BIP49 derivations; compromising a yprv exposes all descendant keys for that branch, store with strong isolation.