No, you can just revoke and regenerate the recovery key with `manage-bde`.

No, the actual data encryption key doesn't need to change unless you're very paranoid. The backup key and your normal key is just to decrypt the data encryption key.