ship-shape (TFA checks): jq: error (at <stdin>:30): Cannot index array with string "authenticated"

[klonos]

Initially it complains that TFA is not enabled:

$ ahoy ship-shape
Executing /app/vendor/bin/govcms-validate-active-tfa...
GovCMS Validate :: Validate TFA config on active site
[fail]: TFA not enabled
jq: error (at <stdin>:30): Cannot index array with string "authenticated"
Executing /app/vendor/bin/govcms-validate-platform-yml...
GovCMS Validate :: Yaml lint platform files
...

...yet further down the log, it shows that everything is fine:

...
GovCMS Prepare XML report
Successfully generated govcms-validate-prevent-theme-modules.xml

[success]: No modules detected.
Executing /app/vendor/bin/govcms-validate-tfa...
GovCMS Validate :: Validate TFA config
[info]: TFA is enabled
[info]: TFA is required for authenticated users

GovCMS Prepare XML report
Successfully generated govcms-validate-tfa.xml

[success]: TFA is enabled and properly configured
Executing /app/vendor/bin/govcms-validate-active-modules...
GovCMS Validate :: Active modules validation

GovCMS Prepare XML report
Successfully generated govcms-validate-active-permissions.xml
...

Manually checking shows that the tfa module is enabled:

$ ahoy drush en tfa
 [notice] Already enabled: tfa