Allow user to specify whether to enable TFA on new ApiClients