At least for the public launch, we should have a background-enforced time-limiting on password retries, to reduce plausibility of brute forcing a metamask vault. Maybe the retry interval should increase logarithmically, too.