pub(crate) fn get_otp_secret(username: &str) -> Result<String>
Retrieve OTP secret from credential storage