StrictMfa

Multi-factor verification within the last 10 minutes. Falls back to first-factor verification when the user has no second factor enrolled.