[keycloak-user] Another question about brute-force detection