Owner password recovery is available only when the private recovery switch is enabled.
This path is audited and should be turned off after access is restored.