Needs to be another conditional in here somewhere.  Both branches would return False but only one of them would be because yubikey single factor auth is disabled.