Make bruteforce protection configurable