Fortinet VPN design flaw hides successful brute-force attacks