docs: protected OneTimeTokenAccount decode(final OneTimeTokenAccount account) {
          val decodedSecret = tokenCredentialCipher.decode(account.getSecretKey());
          val newAccount = account.clone();
          newAccount.setSecretKey(decodedSecret);
          return newAccount;
      }