Prevent bruteforce attacks on administration login

[SH]

ref #438

[SH]

ref #441 initial implementation of login policy (admin)

→ <<cset 75be1e492d1a>>

[SB]

Is brute force prevention for admin login now part of this? I seem to remember reading on the change log something about this being done already?

[SH]

Yep, there is "slowing" protection implemented. After couple invalid logins user(=ip) will need to wait some time. Future plan is to extend it to dovecot to have unified protection...

[SB]

Fantastic, thank you