Add onetimeauth wrappings, tests.