Someone hid a little surprise behind a very serious-looking OTP box. You already know where to find the code — it's only good for 10 minutes, so don't dawdle.