A conditional executor for Keycloak login flows, checking if the user has TOTP or Webauthn 2FA enabled