acvp: highlight that the TOTP secret goes in the config file.

Change-Id: I469a49f0f678235700b8859d84b1b25b9f51518e
Reviewed-on: https://boringssl-review.googlesource.com/c/boringssl/+/43325
Reviewed-by: David Benjamin <davidben@google.com>
diff --git a/util/fipstools/acvp/acvptool/acvp.go b/util/fipstools/acvp/acvptool/acvp.go
index bc8b0d8..3522473 100644
--- a/util/fipstools/acvp/acvptool/acvp.go
+++ b/util/fipstools/acvp/acvptool/acvp.go
@@ -270,7 +270,7 @@
 	}
 	totpSecret, err := base64.StdEncoding.DecodeString(config.TOTPSecret)
 	if err != nil {
-		log.Fatalf("Failed to decode TOTP secret from config file: %s", err)
+		log.Fatalf("Failed to base64-decode TOTP secret from config file: %s. (Note that the secret _itself_ should be in the config, not the name of a file that contains it.)", err)
 	}
 
 	if len(config.CertPEMFile) == 0 {