Improve Default Admin Recovery Tooling

[andrewpmartinez]

Add CLI tooling to recover/reset default admin.

[qrkourier]

It feels dangerous to lock the default admin permanently. I assume the goal is to impede brute forcing the password, so a tarpit is sufficient to make brute forcing infeasible because the attempt rate is too slow for even a modest keyspace. How about five attempts and it's locked for 5 minutes?

[andrewpmartinez]

It feels dangerous to lock the default admin permanently. I assume the goal is to impede brute forcing the password, so a tarpit is sufficient to make brute forcing infeasible because the attempt rate is too slow for even a modest keyspace. How about five attempts and it's locked for 5 minutes?

I believe this can be configured through the auth policy feature.