Minor issue in toggle in-line help see to best manage hihg server load in this case
What to do when the administrator secret URL parameter is missing, or is invalid. Redirect: Redirects the browser's to the site root (default). Block: block the request with the Admin Tools blocked request message, and an HTTP 403 status. Please note that this does not help alleviate high server load on sustained password brute force attacks as much as you'd think since password brute force bots typically do not follow redirects anyway; use the administrator password feature to best manage hihg server load in this case