Right now only individuals can enable 2fa. This should be able to be applied by owners and admins to any/all users.