OTP
OTP overview
Managed OTP challenges without exposing codes or hashes.
OTP operations manage challenge lifecycle: create, verify, resend, invalidate,
and read status. Public responses never include OTP codes, hashes, or
verification secrets. Challenge status is distinct from SMS delivery status.