at specific instance or as a
         configuration option
      5. SHOULD NOT retry a failed re-initialization without a user's
         permission
      6. SHOULD warn the user if the sequence number falls below ten
      7. MUST refuse to generate OTPs with a sequence number below one

5. Security Considerations

   All of the security considerations for the OTP system also apply to
   the OTP system with extended responses.

   These extended responses, like OTP itself, do not protect the user
   agains