[FEATURE] vault client: 2FA support