Start setting up an authenticator app

Returns a new key and its otpauth:// link for a QR code that Google Authenticator or any authenticator app scans. Nothing is saved until enableTotp confirms a code from the app. Answers 409 `totp_enabled` while an app is already on.

curl -X POST "https://example.com/api/me/security/totp"

{  "secret": "string",  "uri": "string"}