New admin 2FA requirement sub settting

You should be able to enable an option if the server wide 2FA requirement is enabled that randomly stops admins whenever they do something particularly risky and asks for their 2FA code, if they don't enter it, then their admin + mod permission are blocked until they reauthenticate.