Public search query: how to suppress mfa prompts on shared kiosk devices