TOTP Key Encryption
We could encrypt totp keys in the datebase with a symetric key from the config file. This would protect against a leaked database and mitigate some dangers of sql injections. We should think about if we want to do this.
An example for an application doing this already would be gitlab. See for https://docs.gitlab.com/ee/raketasks/user_management.html#rotate-two-factor-authentication-encryption-key
Edited by nd