Return an UnverifiedSecondFactorCollection instead of an array.