I think at least the same account holder should be allowed to get another nsec generated if an email or phone number were registered for account recovery.