For strictly secondary authentication, it's much more likely that an admin will lock themselves out through local misconfiguration than an attacker will find th

For strictly secondary authentication, it's much more likely that an admin will lock themselves out through local misconfiguration than an attacker will find the mechanism disabled. It's also a one-line configuration change.