Your comments

Nevermind, looks like there was an issue with our Group Policy settings; now all Powershell scripts are being blocked in that tab.

This is a pretty high priority for us over here as well. As much as we love Control, if we can't get proper 2FA going without modifying the Description field, I think we might need to not renew. :\

I made an account just to suggest this same thing!