Update device encryption records and notify IT channel

You receive recovery-key messages without verified device context, leaving encryption records incomplete. Save and dedupe the key into the device record and notify IT so records reconcile same day.