Constant CREDENTIAL_REJECTION_WINDOW 

const CREDENTIAL_REJECTION_WINDOW: TimeDelta;

Within this much of the past, one rejected credential is enough.