Recovering Lost Device-Bound Credentials