Session revocation and client 2FA enrollment are planned, not active in this release.
An authenticator-compatible Base32 secret will be shown. Save it securely.