In bug 797930 we locked the PIN down, but we never unlock it. Suggestion in IRC was to only keep the lock around for some time period (eg. 10 mins). An attempt after that time period, would reset the counter and after a number of unsuccessful attempts lock them out. And let this continue indefinitely.
What say you @rforbes?
Lets make it an hour to keep this bug moving. If rforbes wants something else we can make it that, but should be easy to change.
an hour is fine, but 10 minutes is fine as well. anything over say 5 minutes is fine with me.
I'm going to opt for 10 minutes then. Hour seems unreasonable from the user's point of view.
@andym had already written this with 10 min lockout. Merged.
Verified as fixed. The lockout is 5 minutes and it is working.