add a hint that the admin can recover your files; Don't let the user change the recovery settings if no private key is set