Add note about attacker capable of modifying userdb.
More retry margin.