Add recovery APIs to use when there is something wrong with encryption