pam_duo recently stopped working for logging in via local tty console.
Following the system-wide instructions for duo unix here: Duo Unix - 2FA for SSH with PAM Support (pam_duo) | Duo Security
Multifactor works for gui login, but not tty console log...