Depends on D20016. Ref T920. This does nothing interesting on its own since the TOTP provider has no guidance/warnings, but simplifies an upcoming SMS diff to land separately.
SMS will have these guidance messages:
- "Administrator: you haven't configured SMS."
- "Administrator: SMS is weak."
- "User: you haven't configured a contact number."