Why is 2FA impossible if you self host?