Exactly four recovery keys, each wrapping the same org encryption key with a different recovery-code-derived master key.
Successful Response