For staff members who have ore moderator/admin permissions, or forum administrator permissions, 2 factor authentication should be required.