JSONSchema: add TFA-secret format; support longer secrets