const MAX_LOCKOUT_SECS: i64 = _; // 900i64
Ceiling on the doubling, so a forgotten PIN never bricks the tile — the password route is always there, and a lockout measured in hours would push people towards not setting a PIN at all.