We want to avoid preventing legit users from logging in.
This MR adds a feature flag to control when the login can be prevented.

Changelog: added
MR: https://gitlab.com/gitlab-org/gitlab/-/merge_requests/84971
EE: true