[rwth-security] What to do when receiving unprompted MFA OTP codes