SECURITY: Send an e-mail when a user account is locked out from too many attempts
In higher security sites you'll get an e-mail when anything on the account is changed for security measures. I'd like to see some of this extended to AC such as when a user account is locked due to too many password attempts someone is trying to hack into an account. It would be nice to have that user notified and the IP address of the offender if available. I saw this today where one of my accounts, non-admin (video demo use account) kept getting set to disabled. If I could get a notice of when my account is tampered with I know it's not me and may want to change a password, block an IP address, etc.