Server-side encryption Information

I apologize but I do not think I am grasping the server-side encryption fully. We will not be backup up to off-site data point so I have chosen to encrypt the home storage. Which is great, I cannot browse to the file and read it due to it’s encryption.

However, I read another post that said the Server-side encryption recovery key is gone now, even though this was in the documentation:

This is all fine, but my concern is what if my users forget their password? Is there no admin master key to get their files? Or, as I browse the filesystem I see under files_encrypted there are keys under OC_DEFAULT_MODULE. Is there going to be a separate key for each file in the home directory? Are these in any way recoverable if they lost their password?