2-fa legal status