Banned: XXX.XXX.XXX.XXX for failing honeypot_time on user_pass

We have also run into this. I think that the honeypot code needs to be more configurable. There should either be config to disable it, or config to control it's value separately from the default IP banning.

The MR adds configuration for honeypot. Do we also want to add a flag to just enable/disable honeypot banning?

Thank you @douggreen that looks impressive!

Could you maybe add some tests to prove it works, maybe you can simply combine them from the tests in this module and from honeypot?

Thanks!!