Password spraying that respects lockout policy

Read the lockout threshold and window first, then spray one password per window across all users to stay under it.