[Freeipa-users] Disable MFA prompt on users with no more OTP