How do I require Two Factor Authentication to log in?

This thread details how to use a USB stick as your boot device, though for different reasons. I like the fact that without the stick the machine appears to have no OS on it.