[keycloak-dev] SPI for multi-factor authentication