joshua stein

Tom convinced me that one-time backup codes are a better solution than storing the secret, so I'd prefer to implement that.

Yes, the opt-out is temporary.