Control: IAM root user MFA should be enabled

This control is from a mod dependency: