sealDeviceAuthenticationLastDeviceRecoveryKey
abstract suspend fun sealDeviceAuthenticationLastDeviceRecoveryKey(keyPair: DeviceAuthenticationKeyPair): ByteArray
The whole pending replacement key pair of a last-device recovery (docs/last-device-recovery.md). Its own record type, so it never opens as the active, the recovery or the rotation key or the other way round.