Many websites support two-factor authentication(2FA) to log in, like Github, I wander if we can support it in application layer.
When client clone something, they need input username and password, it is like a website login process. For security, we can
enable 2FA during this process.