I set a strong passphrase for my second profile (I can access owner still) and promptly forgot it two days later. By yesterday I'd reached 131,000 sec time out, BUT because of the automatic restart every 12 hours, I realized that the second profile was letting me try sooner than two days!
Following that, I thought maybe I could time travel and figured out that if I turn off all connections, turn off auto date/time sync, and restart the phone, the second profile allows me to try again and again and after guessing wrong, only going back to 131000ish secs for a time out which is circumvented by restarting the phone.
So, since I have not unlocked the profile still, my question is: is the mechanism to decrypt the profile already decoupled and the phrases I guess go nowhere or am I [very slowly] brute forcing my way through?