Define rules to require 2FA for views or parts of them