Currently [1] the failed login attempts are not reset on a successful
login. This could cause a user with bad memory to lock the account over
time. This can be prevented by setting "Failure Reset Time", but is that
sufficient. Should we reset the failed login attempts on successful login?
[1]
https://issues.jboss.org/browse/KEYCLOAK-2692