This should mitigate to some extent the effect of compromised
accounts, in the time between compromise and when the account is
blocked.