RED   never-worked guard removed
RED   timeouts counted as refusals
RED   exit removed
RED   window ignored (exit at first refusal)
RED   a success does not reset
RED   CheckUsers acts while blind
RED   same-inode skip removed
RED   self not skipped
RED   ENOENT not a refusal
unmutated: ok
