https://www.sans.org/reading-room/whitepapers/authentication/two-factor-authentication-2fa-openotp-36087