Require two-factor authentication for everyone

Sign-in Security in the admin settings has one switch that requires every member to set up two-factor authentication, shows how many have not enrolled, and gives existing members up to 30 days to do so. It needs permission to manage organisation settings.