In my environment, I need to force password + OTP for users. I have "Default user
authentication types" set to "Two factor..." and "Disable per-user
override". However, I'm seeing that SSH Keys that users add to the FreeIPA
console are allowing them to login without a second factor.
Any ideas how to resolve this?