[conception]

It’s probably easier to just have an exception log when someone(s) have 100 bad password attempts in a day or whatever.