Adding a hook right before validating 2F responses will let us fix #3034 as a plugin, or do other checks