Apple plans to allow users to more tightly lock down items stored on its iCloud service and require a physical security key when logging in from a new device.