Relatedly, are there good ways to do this considering 2FA? (or maybe that is tangential to the author's ask)