If login attempts to a user's account exceeds this threshold, that account will be locked for a pre-configured amount of time