pub(crate) fn update_secret(username: &str, otp_secret: &str) -> Result<()>
usually totp secrets do not expire