This patch applies pam_faillock restrictions to Red Hat and CentOS servers.
It's an optional change since it could cause issues with existing production
deployments.
Ubuntu doesn't have pam_faillock, but it may be possible to use fail2ban to
achieve some of the same goals later.
Documentation is included.
Implements: blueprint security-rhel7-stig
Change-Id: Ib2d22deff2d97786b84a550313f6ca08cf10cef8
fa657903bc