Ballot administration

Privileged users are expected to enroll a second factor after signing in.