const REFUSED_AGAIN: Duration;
A refused password is tried again, unchanged, this long after at the soonest, however often the watcher is nudged: retries can lock an account.