https://mikevandenbrandt.nl/security/enhancing-authentication-strengths-for-administrators/