Anti brute-force attack for yubihsm2 session key

[lcmmhcc]

it seems there are only 16 sessions for user to attempt the password,
and after that, the attacker need to wait for 30s ,is that right?

[drseltsam83]

I'm looking into this as well. I can't find any documentation about this. Brute-force resistance is important for handling a lost HSM.