The keyrestore command runs once to unpack & install a backed up secrets bundle from Keysync. This is useful to bootstrap secrets to recover from a datacenter outage and to avoid circular dependencies between Keywhiz and other services.