storePendingRecoveryKeyPair

Stores the replacement key pair of a device recovery. Throws IllegalStateException if one exists already (a pending key is never replaced silently) or if a routine rotation or a last-device recovery is pending. The active key is not touched.