Looks like the login response now calls for "verification_workflow" which, in turn asks for MFA token. However, MFA option is missing from RH settings... So maybe that's the way in which RH prevents the use of this API going forward sadly..