[question] fscrypt recovery - and the mechanics behind it

[jnvsor]

How long until fscrypt recovery will be a thing?

I've had my ass saved at least once in the past by keeping an unwrapped ecryptfs key safely stored, and I'd appreciate having that option again.

fscrypt supports the idea of of protecting a single directory with multiple protectors. This means having access to any of the protectors is sufficient to decrypt the directory.

Can I assume this is "Protector" file contains encrypted keys to encrypted policy files, which contain key/salt for FS policy? Or does it do something more complicated under the hood?