diff --git a/pam-config/source-debian/faillock.conf b/pam-config/source-debian/faillock.conf
index 4df0b4e..11ee259 100644
--- a/pam-config/source-debian/faillock.conf
+++ b/pam-config/source-debian/faillock.conf
@@ -1,2 +1,3 @@
 deny = 5
-unlock_time = 300
+unlock_time = 900
+even_deny_root