breachCheckFailsClosed property
Whether sign-up and password change are refused while the breach corpus cannot be asked. Off by default, and logged when it happens: the check is hygiene on top of hashing, and a sign-up form that depends on someone else's uptime is the dependency the spec declines for captchas.
Implementation
final bool breachCheckFailsClosed;