Password lockout approach

[Cantor, Scott]

It's net.shibboleth.idp.authn.AbstractUsernamePasswordValidationAction you probably want to use. If that gets extended to take a StorageService property to use, and some appropriate methods to get called to report success/failure by the subclasses it should be easy to wire those into the subtypes along with some settings to turn the feature on and control it.

Add a Function<ProfileRequestContext,String> property to deduce the lockout key, etc.

I guess if I'd really talked it out originally, I could have done it without much trouble.

-- Scott