dir = /run/faillock
deny = 3
unlock_time = 600
even_deny_root
root_unlock_time = 600