Require password or MFA before removing MFA device

**Is your feature request related to a problem? Please describe.**
I'm trying to require more privileged applications to require explicit MFA (if the user has it set up) even *after* the user has logged into Authentik, but the problem is that if an attacker gains access to a machine where the user is logged in, they can simply remove all MFA methods and get access to the privileged service.

**Describe the solution you'd like**
I would like the option to require confirmation of an MFA device or password before any MFA device can get removed.

**Describe alternatives you've considered**
I could not think of any.

**Additional context**
N/A