Because timeouts here directly translate into administrators actually waiting, or failing, to get into the device, a rising count on this specific table warrants faster attention than the equivalent counter on the accounting table, since it affects the admin's own ability to manage the box during whatever incident they're responding to. For example, this counter spiking during an active outage, right when admins most need CLI access, is a particularly bad time for the dedicated login-auth server to start timing out.