This transition is bugged.  The transition needs to be to `mfa-strong-two-factor` to match the `<subflow-state id="mfa-strong-two-factor"`

Is there an opportunity for greater consistency about where `_`s and where `-`s are used, while supporting Evergreen's stated `authn_method` parameter value intention?