(Forwarded from https://bugs.debian.org/921773)
When run with --show-failed-attempts i3lock unconditionally increments failed_attempts.
This would wrap around of course, but on most systems, PAM delays unsuccessful attemps by 3 seconds. So it would take INT_MAX*3 seconds to happen which is roughly 204 years on a 32 bit system.
I don't think it makes sense to add more logic to this counter, but I wanted to check with you first.