Create a "username/password/OTP" block that could be added to an asset as a "field" (it would add 3 fields at one time). That would then populate the "Passwords" tool automatically (linked to the asset that created it)... That seems like a beautiful fix for the current dilemma of "does this password deserve an asset or not"...