Do not have more than one passdb request in-flight for a user

Prevents us from making 4-5 concurrent requests (or fallbacks to
decryption from database) for the same user when clients like
Thunderbird connect.