I actually stated the reason in one of the commit messages. I realized RFC 6238 has an errata with the correct secret values. http://www.rfc-editor.org/errata_search.php?rfc=6238