Should players be kicked on wrong password?
kickOnWrongPassword: true

Should kick player after tried "x" times wrong password. better than every time kick them :/

Until its done, you can use this:
tempban:
enableTempban: false
maxLoginTries: (Number)
customCommand: 'kick %player% (Message)'

For only kick or:
enableTempban: true
maxLoginTries: (Number)
tempbanLength: 0.1
minutesBeforeCounterReset: 0.1
customCommand: ' '
For tempban 6seconds (You can edit the numbers)