> Are there multi-factor options available? Mandating good old-fashioned client-certificates is most likely your best bet in terms of delivering the best user-experience.