OpenConnect 6.00 adds proper support for HOTP tokens. We've had HOTP support for a while but it's been kind of unusable until now. HOTP is counter-based and you need to increment the counter each time you use a tokencode. But we had no way to *store* the updated counter. Now we do... you call the new openconnect_set_token_callbacks() function and give it a callback function it can call when it's updated the token. And we store it in the NM secrets — which means we have to migrate it from the configuration 'data' section to the 'secrets' section.

See https://git.gnome.org/browse/network-manager-openconnect/commit/?id=b3815e96
and https://git.gnome.org/browse/network-manager-openconnect/commit/?id=5e899ec0