Add 2FA without SSH keys

Currently, there are sites that will allow 2FA / TOTP without having to add SSH keys for authentication. For Bitbucket, we'd need to expand this using SMS.

For now we only allow normal 2FA or FIDO U2F with use of SSH keys.