As an admin, retain an escrow copy of users' private keys

I have factored out the secret recovery issue into a new topic:
As a company owner, I can retrieve any secret stored in the company passbolt instance