OTPs are great and all but in the end you keep the damn unhashed secret on all machines that have to accept the OTP.