It is now possible for admins to enforce this authentication for certain users. This makes sense if a person has a lot of rights and you want to protect this account better.