I'm reminded of a story about Google's internal password vault outage, where restoring service required opening a safe whose combination was of course in the password vault.