just some questions about dialog_example.c, just to check if i understood the source

the three_attempts, request 3 times the password, if it's all wrong return CR_ERROR, and user is 'disconnected'?

the two_questions, request the password, if wrong, disconnect with CR_ERROR, send the second question, and if it's not == to "yes, of course", return CR_ERROR, else, user is connected?

the info->auth_string, is the password of mysql.users table? 
there's more examples where i could get the user, and check some value inside a mysql.* table?
i'm thinking about OTP passwords like google auth