Force MFA for CLI and API users