Security measure for changes in settings

Provide a security option that, when enabled, requires users (including admins) to always enter a 2FA code when attempting to change any security related settings. A 2FA code should also be required ...