And sometimes no way to remove the sms ability to reset an account credentials for login even after totp is set up.