properties: use a real GError domain instead of 0 in export()

(cherry picked from commit d16e7d1ea954516d0a12a7b4b8ebf67c15a11746)
Add HOTP support

This requires migrating the token_secret from a config item to a secret,
which thankfully doesn't seem to be too diffcult.

(cherry picked from commit b3815e96635c8f89c6161bdb6de53cd3c01c8535)
Always return success from auth-dialog

We want to store the secrets even when we ultimately failed to log in.
This was slightly suboptimal even before, when we were failing to remember
things like the 'autoconnect' and 'certsigs' secrets. But now with HOTP
it's particularly important that we keep track of which tokens have been
used *even* if we end up failing to log in.

Even if we don't get a valid login cookie, it's OK to return success.

(cherry picked from commit 5e899ec0dfff56ac15f9e19cccb8b8d17f792afd)
Support libopenconnect.so.4

(cherry picked from commit 58944a3ef9c92f7afa07cbb539d062e1956bafc0)
Drop support for libopenconnect.so.1

(cherry picked from commit b8c7e773204d3b4a85a27d7d2ae58dfc1939e1a8)

Conflicts:
	auth-dialog/main.c
Update to new hash handling, fix to match stored certs only for the same host/port

(cherry picked from commit 2dc45e25b200e1b70e862f46c9f7ad652e59c8a2)

Conflicts:
	auth-dialog/main.c