mfa_enabled() checks the session class: https://github.com/apache/infrastructure-asfquart/blob/e302f3c5f6b1a77dbb27bd070e42c4767bef6911/src/asfquart/auth.py#L25 but the other methods do not, e.g. for member(): https://github.com/apache/infrastructure-asfquart/blob/e302f3c5f6b1a77dbb27bd070e42c4767bef6911/src/asfquart/auth.py#L36