I changed some text in the SMS that is sent to verify the command with the admin user. It now states the proper wait time (2 minutes) and mentions that it's possible to abort the command immediately by replying with anything other than the requested PIN.