RecoveryKeyResetCompletionId
Identifies one reset completion statement: 32 bytes, SHA-256 over the domain KSecureMessage-RecoveryKeyResetId-v1 and the statement. The server records the ID of the completion that installed the current recovery key, so a retry of the same completion is recognized. Never an authorization. Not the server-chosen RecoveryKeyResetId of the pending reset.