recovery: update recovery-keys to match updated source