Temporarily disabling a login after too many failed password attempts, to slow down brute-force guessing.