For enterprise-managed devices with recovery keys