Require 2FA for actions that require a password