Include pam_tally in account list to clear faillog on successful authentication
Bump deny limit up to 3 (SSHD is also incrementing the faillog, so one bad login counts twice)
Include Auto Blacklist in PAM (pam_abl)
Modify logrotate rules