Little bit complicated, also if the hacker gets the active key they can change that power down recipient account, unless u put it on a timer that takes 30 days to effect such change, a two account security feature may be too many keys for the average joe to think about and potentially lose. Currently there are vesting routes you can set with the active key.