LAST_DEVICE_RECOVERY_CHALLENGE

Issues a last-device recovery challenge. Public, not ServerAuth-signed.