When adding `token-mode=totp` and `token-secret` it still prompts for the 2FA code. Although it works when passing them to the openconnect CLI.