It's unable to complete account recovery

[yakovshkolnikov]

Preconditions: Passcode should be turned on, you should make account recovery before doing next steps.
STR:

1. Turn passcode off
2. Turn passcode on
3. Try to recover account:
   createRecoveryAuthorization -> completeRecovery

After that we receive following error:
Error Domain=io.tokensdk Code=102 "Invalid user for authentication" UserInfo={NSLocalizedDescription=Invalid user for authentication, TKEncapsulatedErrorKey=Error Domain=CryptoTokenKit Code=-3 "setoken: unable to sign digest" UserInfo={NSLocalizedDescription=setoken: unable to sign digest, AKSError=-536363001}}

in TKSecureEnclaveCryptoEngine.m file in signData: usingKeyLevel: reason: onError: method SecKeyCreateSignature fails