[lxgr]

But if no 2FA password is configured, does this mean that there is no way to truly log out of a given client?