setUserMFAPreference

The caller is identified by an access token, which the fake does not model - so there is nothing to check.