Add TwoFactor Authentication to the system * Make the service provider configurable * Allow users to turn it on or off * Ensure there's a backup mechanism