oathtool challenges now also passed as strings + types, cleaned up options