only yubiCloud scope for yubico otp