hardening: Lock and block users: fixed wrong variable