migrating advanced 2FA credentials during platform domain severance