Creates a new MFA key, only allowed if the user has no MFA configured. TOTP tokens use SHA-1 algorithm.
OK
Whether the operation succeeded
Optional error description (set if 'success' was false)
Secret key (use SHA-1).
URL that will be converted into a QR code that can be scanned.