Today 2FA is all or nothing. We would like to have it required for guests only.