[jaryd]

Could a user bypass this by using: ssh [e-mail] -Tv 'bash' ?

[pedrocr]

The command you pass in is available to the command="" script in SSH_ORIGINAL_COMMAND, so you can exec() that or ignore it

[moomerman]

Just tried it and it still prompts for the auth code

[jaryd]

Thanks for the follow up! Will continue to play with it.