Use #display for #ask_for_second_factor to flush $stdout