If TOTP is enabled for a user, it will be disabled until the user configure it again, which will generate a new private salt.
Closes #2722