Move mfa_key to users table