[keycloak-user] OTP validation