Default 2FA to an empty string.
Show warning only when not running as dummy. No need to use load_justdice when secret url with login info is present.