Server-chosen identifier of one last-device recovery challenge: 16 random bytes. Not secret.
A copy of the ID bytes.