Two-factor authentication on the account

These certificates are legal evidence tied to my email identity. The account should support 2FA — right now it's just a password, which feels light for what's at stake.