More importantly, the *value* of `authn_method`, that is, `strong_two_factor`, uses an underscore. :)