The code expires in ~5 minutes and is single-use.