Session revocation and client 2FA enrollment are planned, not active in this release.