It sounds like you should be using 2FA with a hardware security token rather than setting up a honey pot that may or may not be triggered.