This must be done on both the server and client. For usernamepassword authentication, have Tunnelblick save the username and password in the Keychain. For 2FA, do not use --auth-nocache, and use the --auth-token option in the client-connect and auth-user-pass-verify scripts on the server side to ask for 2FA once per session only.
fpps doctor meaning philippines