Any reason to make it true by default? Something like accounts locking or something else?