Add flag for pendig authentication
Allow activating ticket-granting tickets with pending two-factor