Add failure-counter mechanism

[ionut-arm]

As part of our safety mechanism within the service, we could have a configuration value for the administrator which controls how many of a certain type of failure are acceptable before the service becomes unresponsive, somewhat like TPMs freeze if a number of certain failures occur.

An example of a failure that might be included is an authentication error (e.g. the JWT token wasn't signed correctly), or generic errors from providers.

This does open the possibility of a DoS, so we probably shouldn't enable it by default.