Currently, Bitbucket only compels admin and sysadmin users to enable two-step verification if the JVM flag '-Datlassian.authentication.2sv.enforcement.enabled=true' is set. However, there should be a similar flag that compels regular users such as users with 'Project creator' and 'Bitbucket User' permission to set up two-step verification the next time they log in.