Hmmm ... looking around, isn't the following implemented?

https://signal.org/blog/secure-value-recovery/

(It's also relevant to the OP.)