passwd needs sudo to lock account