If you want to add more keys, change the arguements of vault operator init: -key-shares=3 and -key-threshold=2. key-shares should not be smaller than key-threshold. You also need to copy and paste the ...
# write OS to root disk... # decrypt user-data ...