2FA - when required by your vendors, do you stipend your staff?