Who cancels a pending reset: see RecoveryKeyResetCancellation.
A registered device of the user, with the registration its ServerAuth request was verified with.
The current recovery key publicKey at epoch, whose signature was verified.