Restrict to a specific OTP Authenticator App a user can use