User exhaustion from repeated authentication prompts that leads to workarounds or helpdesk calls to bypass controls. An exploitable attack vector.
Want to actually apply concepts like this instead of just reading definitions?