Does it actually require an OTP or is this just hoping that the agent follows the instructions every single time?