DeviceRecoveryException

The authorizing device has no registered key.

The target's or the authorizer's registration changed since the proofs were checked (another recovery won), or the replacement key is already the target's key from another recovery.

The authorizer belongs to another user than the target.

The target's authentication epoch cannot grow any more.

The timestamp is outside the validity window.

The authorizer's signature or the proof of possession does not verify.

The request is malformed.

The nonce was used before.

The target device named itself as authorizer.

The target device has no registered key: use first registration.