There can be multiple active conf keys if none are used but only one active recovery key, correct?