Cleanup ticket-granting tickets with pending two-factor authentication