A server is experiencing repeated SSH brute-force attempts. You want fail2ban to monitor the SSH daemon, ban an offending IP after 5 failed attempts within 10 minutes, and keep the ban in effect for 1 hour. Which configuration should you place in /etc/fail2ban/jail.local to accomplish this without editing the shipped jail.conf?