heroku enable yubikey only when it is needed