I have a customer with a requirement that after three Forgotten Password
attempts (answer 3 challenge questions) that fail, to perform an action.
(Specifically send an email).

But looking through the UI I am not seeing any way to trigger intruder
detection like functionality on failed Challenge Response. Secondarily,
I do not see any On Failure action. I do see there are post success
Actions, which is useful. Be nice to see that extended to on failure as