[Freeipa-devel] [freeipa PR#1582][opened] User must not be able to delete his last active otp token