Allow recover operation to be re-run after timeout

If the recover operation times out (user with may shared files), a rerun will just try to restore the same permissions again.

Add a --rescan option that checks what permissions have already been restored and removes those from the pending restoration operations.