add parameter for vas.conf: disabled-user-pwhash & locked-out-pwhash