The supplement to NIST's digital identity guidelines could pave the way for agencies to adopt stronger multi-factor authentication methods.