oathtool --totp=FOOBAR means SHA1

Non-supported --totp values should be rejected, not just silently treated as SHA1.