Force/suggest enabling two-factor authentication