spec: https://wicg.github.io/web-otp/