As an owner account I want to enforceable 2FA for all team seats rather than having this as an optional option.