Add a configuration option "sleep_on_deny"

Add a configuration option "sleep_on_deny" to sleep a settable time
(multiplied by the number of attempts) when access is denied.