[Pki-users] Creating recovery privatekey(asymetric key) in DRM

Which certificate should be given for last argument of function from KeyClient.java public KeyRequestResponse <http://pki.fedoraproject.org/pki/javadocs/dogtag_10_2_6/pki/com/netscape/... recoverKey(KeyId <http://pki.fedoraproject.org/pki/javadocs/dogtag_10_2_6/pki/com/netscape/... keyId, byte[] sessionWrappedPassphrase, byte[] transWrappedSessionKey, byte[] nonceData, java.lang.String b64Certificate) a. Transport cert b. Subject which key belongs to cert c. Agent who is actually logged in via CryptoManager cert d. Person who should be able to retrieve this key cert ? And another question, can user add some message for Kra agents with this request?