adapt TOTP replay detection to use new liboath API