depend on oath-toolkit, so openconnect has one-time-password support

If liboath is present at build time, OpenConnect will link against it to provide one-time-password support. That way, it can generate its own TOTP/HOTP/etc. keys if you provide it with your OTP secret.
Should be `:optional`.