Many websites support two-factor authentication(2FA) to log in, like Github, I wander if we can support it in application layer. When client clone something, they need input username and password, it is like a website login process. For security, we can enable 2FA during this process.
