Wraps an attempt's retriever so a cold login after a sent token warns first.
The attempt's watch.
The attempt's retriever, if it can ask for a code.
The watched retriever, or the same one when there is nothing to watch.
Wraps an attempt's retriever so a cold login after a sent token warns first.