hardening: Lock and block users: initial revamp