Auditing and MFA were the hardest part for Kratos to implement