Marks an endpoint to be only reachable when the logged in user provides a second factor somehow.
Optional
The allowed two factor methods to use.
This skips the require 2fa validation.
Marks an endpoint to be only reachable when the logged in user provides a second factor somehow.