Failure number is hardcoded, is it on purpose ? what about letting administrator to enforce this value through admin panel configuration ?