MFA result reuse with Duo.

[O'Dowd, Josh]

> I don't know how best to solve at this stage, but I think it boils down to more control over reuse/SSO.

FWIW, when I realized there was going to be a problem with "reuse result checking", my first thought was to check the wiki for something telling me that MFA would essentially run again, reuse results in hand, and within MFA reuse would also happen recursively.   For example, in our case, the reuse active result for authn/Password would've been satisfied in the prior session, while the Duo factor, if triggered by the script this time, would not and the authn/Duo flow would fire.

At the time, though as you already pointed out, I am "triggering" Duo via MFA script, which is not right.

-Josh