yeah. That's like saying 'if you try to login more than 3 times in an hour and fail, I'm blocking you'. The least amount of time is what you want there. The amount of time a user is locked out is what you would set for a longer period.
Does that help?
tim