the-bastion/bin/plugin/restricted/accountMFAResetTOTP.json

{
    "interactive": [
        "accountMFAResetTOTP"               , {"ac" : ["--account"]},
        "accountMFAResetTOTP --account"     , {"ac" : ["<ACCOUNT>"]},
        "accountMFAResetTOTP --account \\S+" , {"pr" : ["<enter>"]}
    ],
    "master_only": true
}