Nobody has mentioned Captchas, apparently there are number of applicable CPAN Modules.
I think they are the most effective method for both avoiding lockout situations and making brute force attacks prohibitively expensive. Can anybody vouch for any of the modules?