Starts a recovery, or records one that already finished. Allowed from BLOCKED and QUARANTINED.

• completed: false (default), self-service in two steps: the account becomes RECOVERING until expires_at. The events of your recovery flow (for example, the CHANGE_PASSWORD of the reset) pass with strong verification instead of being denied. When you are sure the user recovered the account, complete it with PATCH /v1/accounts/USER_ID/recoveries/{recovery_id}. If expires_at passes first, the recovery is abandoned and the account gets a new restriction of the same kind it had before.
• completed: true, call center in one step: the account stayed BLOCKED during your review and becomes NORMAL.

Reaching NORMAL updates last_recovered_at and recovery_count. If a block was a mistake, recover the account with client_flow: FALSE_POSITIVE.

Special cases:

• completed: false on an account that is already RECOVERING returns 200 with the same recovery in progress (the same recovery_id) and renews expires_at, with the value you sent or the default period.
• completed: true on an account that is RECOVERING returns 409: complete the recovery in progress with the PATCH.
• On a NORMAL account it returns 409 if the user never went through a recovery, because there is nothing to recover. If they did (for example, you retry after a timeout), it returns 200 with that recovery.