I am having the same request. Our switches are in Local mode.
We are required by some clients to have 2FA on these switches and the 1960 has this issues too.
There are NO IP restrictions either which would allow us to secure them. Since we can limit only hosts IP's with 2FA to access https.
------------------------------
Vaughn
------------------------------