Better two-factor instructions. Don't alert about missing 2-factor if Yubikey is configured.