···368368 # deps are present (they are) and keeps the crypto store under
369369 # /var/lib/hermes/.hermes/platforms/matrix/store/.
370370 MATRIX_E2EE_MODE = "optional";
371371+ # Clients now exclude devices their owner did not cross-sign (MSC4153,
372372+ # Element/SchildiChat Next): they show such a device's messages as
373373+ # undecryptable and withhold their own room keys from it. With this set
374374+ # the adapter bootstraps cross-signing once (no master key on the
375375+ # account yet) and signs its device; the key is written here 0600 and
376376+ # never overwritten. Move it into pass afterwards; it is needed only to
377377+ # cross-sign a new device id (MATRIX_RECOVERY_KEY).
378378+ MATRIX_RECOVERY_KEY_OUTPUT_FILE = "/var/lib/hermes/.hermes/matrix-recovery-key";
371379 # Optional defense-in-depth (confine to specific rooms; DMs are exempt):
372380 # MATRIX_ALLOWED_ROOMS = "!yourRoomId:lassul.us";
373381