check for tfa during cluster join, abort if yes