Single attempt per device · failed access is logged and permanently blocks this device