Resolving Conflicting Stakeholder Requirements

How a PM should resolve two stakeholders' directly conflicting requirements in a PRD.

Sales wants a one-click checkout to boost conversion, while Security requires two-factor verification at checkout. Both requirements are logged in your PRD. What is the best first step to resolve this conflict?