SDK-issued restoration option tied to a validated record and current destination policy.
Required private-key authorization on this installation.
Exact original DID to restore.
Destination signing backend.