- [ ] non-30-second rotations - [ ] lengths other than 6 - [ ] possibly SHA-256/512 in addition to SHA-1 (though I don't think this was in the RFC) If we ever get auto population of keys (like from scanning QR codes) as in #4 this would be more important to think harder about.