pub const SIGN_IN_ADDRESS_FACTOR: u32 = 5;
A client address may fail this many times the per-username limit: an office behind one NAT address shares it.