Comment by 6r17

One clean implementation of this is to wipe everything on the 2nd password failure.