Encrypted recovery objects. A separately held recovery key is required.