Two-Factor Authentication Across Package Registries

Something you have, something you know, and someone else's OAuth.