Anyone using Strongbox? (
http://webmastersguide.com/?htaccess-cgi/strongbox/).
I've seen it on a few sites recently and I am wondering how it is working out. We use Pennywize but it will only block compromised accounts and does jack all to keep them from being hacked.
How difficult was it to set up?