[rwth-security] Microsoft Entra "security defaults" to make MFA setup mandatory