Depends on if you have metrics or haveibeenpwned set up

Nothing like this, but it seems to not work well without - especially post to register or login account - timing-outs. Some calls for schema?