1) Make generic accounts. This is especially helpful when renewing the
various components at the start of the year- APN/ VPP tokens. 2) Avoid
tying the phone component of the two factor to a personal phone. Some
folks tie it to an online service, but...