We should have the ability to require all staff DCNXT accounts to have 2FA enabled.  Currently I would have to go to each user and enable it, and then make sure they don't disable it.