Kind of credential a ceremony registers. Wider than Bank.Primitives.EndUserAuth.EndUserSignatureKind on purpose:
a recovery key is registered like any other credential but signs nothing operations are confirmed
with, so it belongs here and not there.