handle both 0 and -1 as disabling reset count and lockout duration