Can we have a feature to enforce users to use MFA? It would be great if it could be configurable based on permission but, at the minimum, global Enforcement policy.