Only max_login_attempts is now configurable.