New and improved two-factor lockout recovery process

Instead of relying on Facebook, I'd rather just keep a backup U2F device in my safe deposit box. (Especially since I also have 2FA on my Facebook account, so for safety I'd need a second device anyway.)