Witnesses to Help Recover Hacked Accounts

How exactly will this witness process work to recover steemit accounts that are hacked?

Do the witnesses need to be steemit users as well?

Any more information on this would be greatly appreciated.

Thanks in advance!