Only one command needs to have backup.db owned by core user

[cehoffman]

The less needed to do during a recovery better and I think leaving the etcd backup readable by core is bad. Arguably you don't even need it in the one case it is used if you are ok with all the recovery files being owned by root instead of core.

Personally I do the recover command as root because I find it less error prone to start the recovery by first running sudo su - and running each step as root and dropping sudo all together. The last thing you want is a child process or a piped command to fail because sudo wasn't tacked on.

[cehoffman]

Our process revolved around sudo su initially before any session because it was preferable to failing pipe commands.