[Auth] Trap account and honeypot user

[hidden-dimensions]

Support some trap account with a predefined easy password list, upon login to these trap account, it should trigger the intrusion detection system (generate alarm, etc).

We could go even further to allow such login and return a user with "honeypot" flag, this will allow application developer to implement some sort of honeypot mode in their app.