Make the temp-key mechanism private to the hashers.

Also, fix bug in OATH authentication - hasher.hmac_sha1 returns the
hash digest - get_hash() should not be used (it's a pyhsm thing).
Remove old unused imports.
init