v2.5.0

Added bulk add for Internal Domains on Network Settings.
Added a new DNS Exfiltration Blocking feature page.
Added a live Control D service status badge to the Status page.
Mandatory 2FA can now only be turned on by an owner who already has 2FA on their own account, so owners can no longer lock themselves out. Organizations that require 2FA now block members until they enroll, from the first page load, after a reload and on direct links.ded.
Domain Test now handles internationalized domain names correctly.
Fixed issues in single sign-on, Copy Rule, Profile Options (including Branded block response), Services overrides for sub-organizations, Clients and IPs selection, bulk endpoint editing, Activity Log pagination, Identity & Access member removal and returning from maintenance mode, plus some minor UI/UX issues.