Probably the 'right' way to do this is with an auth_ plugin, not a tool_ plugin. Different users can be set to use different auth_ pugins.
Security and privacy
Multi-Factor authentication plugin for only specific users
This discussion has been locked so you can no longer reply to it.