Sorry, I took that you would also check passwords on-the-fly.
I agree that there is no risk to lock accounts.