We will have 2fa in a couple of months from now. We have already started working on it internally and should have an equivalent of a "RFC" in some time. What second factor are you considering using?