2fa is supported with rolling codes but hardware tokens should be supported as well.