The government is rolling out 2-factor authentication for federal agency dot-gov domains (Washington Post)