The main purpose of this is to set an upper bound on the rate at which an attacker might execute a brute force attack on the weave password. No need to get clever or precise here. Closes #837.