Correct usage of middleware client second factor service.