Interesting.  Should the CAS validation response enhancement instead be tweaked to include all the fulfilled extraordinary authentication methods, perhaps something like

    <authn_method> strong_two_factor retina_scan fingerprint rfid_card </authn_method> 

?