Fix array('disabled') and array('disabled' => true) working differently.

The shortform should work the same as the longer form with regards to
disabling field locking with SecurityComponent.

Fixes #3734