django-otp can [plug into django-agent-trust with django-otp-agents](https://pythonhosted.org/django-otp/auth.html#authorizing-users), maybe there's nothing else to do here besides documenting that.