iThemes Security Pro 8.4.2

-New Feature: Add Two-Factor On-Board flow.
-Enhancement: Support disabling enforced Two-Factor the first time a user logs-in.
-Enhancement: Introduced Login Interstitial framework to consolidate code between Password Requirements & Two Factor.
-Bug Fix: Resolve warnings when upgrading file change settings.
-Bug Fix: Allow read-only Application Passwords to make HEAD requests.

-Tweak: Move Online Files hashes to a separate storage setting to improve performance on sites with large number of plugins or themes.
-Tweak: Add description for File Change recovery related logs.
-Tweak: Don't report removed files if the removal is caused by a new file extension being excluded.
-Bug Fix: Improved detection of REST API requests on sites without a home dir.
-Bug Fix: Improve File Change recovery system on high-traffic websites.
-Bug Fix: Fix warnings on debug file change log items.

Big Fix: Fixed a fatal error condition that could occur on the Grade Report page when specific combinations of manual roles for Two-Factor Protection > User Type Protection were selected.