[jiveturkey]

doesn’t work / N/A for the OP. recovery keys require the user to do something in advance of reset. his users won’t do that.