wait more when there are too many auth failures in the last hour.