The CLI currently does not warn a user before their 3rd pin attempt bricks a card.
The pin prompt flow should utilize the GET_STATUS APDU to retrieve the number of remaining invalid pin attempts for the user, display the value, and warn the user before the final pin attempt is about to brick the card.
https://github.com/GridPlus/safe-card/blob/master/src/main/java/im/status/keycard/KeycardApplet.java#L284