Although CSV files downloaded from AWS only contain 3 values, allow the mfa
serial to be the 4th, for convenience