Quick survey — if you use a YubiKey, did you disable the authenticator-based TOTP on those accounts?