newPinPekArn

Returns the keyArn of the PEK protecting the incoming new encrypted PIN block.