Review app: https://2fa-support-security.about.gitlab.com/2018/10/08/enforcing-managing-2fa-support-security/
Closes #2875 (closed)