"good security should only give you 3 chances before the account and or terminal is locked." I'd say it depends on the value of the resource you are protecting. :)