FileVault Recovery Key: “check using fdesetup validaterecovery that the Recovery Key is correct whenever it’s changed”