Because the key mismatch is already checked, this can only fail if the Schnorr signature fails.
There is no way to trigger this from a test, but in any case we should always check the return to make the init code more robust.

Depends on D9365.

Ref T1635.