--------------------------------------------
- Built-in :ref:`HOTP <hotp-devices>` and :ref:`TOTP <totp-devices>` devices are
now rate-limited, enforcing exponentially increasing delays between successive
failures. See the device documentation for information on presenting more
useful error messages when this happens, as well as for tuning (or disabling)
this behavior.
Thanks to Luke Plant for the idea and implementation.