recovery: add keys and postrecoveryboot.sh