OTP verification can be done via an internal API call. Once it's
verified, a session is registered in Redis with the associated SSH key.