https://paragonie.com/blog/2016/09/untangling-forget-me-knot-secure-account-recovery-made-simple