I love andOTP, it does one job and gives me (not my phone's firmware) control over the secret storage.