Is it safe to store OTP tokens on the same device? Even if app is encrypted and locked with passcode?