Built-in mechanism to protect token secrets from brute force #2043
Description
Request details
Branched from #2026 (comment)
Add a mechanism that will temporarily block auth for host after several unsuccessful attempts by default. Also make it configurable through the configuration file and/or console: ability to change duration of ban, number of failed attempts before host will be banned, etc.