Where the policy requires an authenticator you set one up at sign-in, and a forgotten password is reset by the computer's own administrator. A paid seat is a machine, not a head. And an administrator runs the people from one page.
Full technical release notes for 7.2.3 are on the changelog, alongside every other Ghost Architect™ Local release.
Ghost Architect™ Local runs on your own hardware.
If you want an evaluation trial, the download page tells you how to get the tarball, verify it, and start the evaluation trial on your own hardware.
Request Ghost Architect™ LocalEJ Wisner, founder of Ghost Architect™. Local pricing is monthly, per team size, with no per-token bill; the numbers are on the pricing page.