That's what otp_check() does already.