Authenticator setup requires a recent step-up token.