don't need last OTP only last counter and save counter even if compromised
Added qrexec policy and associated dom0 script. Documentation update