It's possible to bypass MaxAuthTries restrictions.
vulners.com/securityvulns/securityvulns:doc:32378
vulners.com/securityvulns/securityvulns:doc:32409