@matigo Yes, definitely that as well. I have a lot of questions about how two factor is supposed to work on Macs across the enterprise for technician/elevated privileges roles because it seems very tied to individual user login keychains and computers.