well, that almost worked:
root@pvebak:~# pvecm add 149.59.225.34 --force
trying to aquire cfs lock 'file-corosync_conf' ... OK
node pvebak already defined
copy corosync auth key
stopping pve-cluster service
backup old database
generating node certificates
merge known_hosts file
restart services
successfully added node 'pvebak' to cluster.
root@pvebak:~# pvecm nodes
Membership information
----------------------
Nodeid Votes Name
2 1 pvebak (local)
root@pvebak:~# pvecm status
Quorum information
------------------
Date: Mon Dec 4 20:39:58 2017
Quorum provider: corosync_votequorum
Nodes: 1
Node ID: 0x00000002
Ring ID: 2/6996
Quorate: Yes
Votequorum information
----------------------
Expected votes: 1
Highest expected: 1
Total votes: 1
Quorum: 1
Flags: Quorate
Membership information
----------------------
Nodeid Votes Name
0x00000002 1 149.59.225.33 (local)
root@pvebak:~# ssh 149.59.225.34 pvecm nodes
Membership information
----------------------
Nodeid Votes Name
2 1 pve2 (local)
3 1 pvevote
root@pvebak:~# ssh 149.59.225.34 pvecm status
Quorum information
------------------
Date: Mon Dec 4 20:40:12 2017
Quorum provider: corosync_votequorum
Nodes: 2
Node ID: 0x00000002
Ring ID: 2/7804
Quorate: Yes
Votequorum information
----------------------
Expected votes: 3
Highest expected: 3
Total votes: 2
Quorum: 2
Flags: Quorate
Membership information
----------------------
Nodeid Votes Name
0x00000002 1 149.59.225.34 (local)
0x00000003 1 149.59.225.220
root@pvebak:~#