Multi-factor authentication has shifted from a nice-to-have to a cyber insurance requirement. Here is what full coverage actually needs to look like.