unsafe
open suspend override fun unsafeChangeRecoveryIdentifierSignatureRequest(identity: PublicIdentity): SignatureRequest
Recovery moves only to an identity of the inbox, so a change to any other identity fails here, against the inbox's state fetched from the network, before anything asks a signer to sign.