allow toggling of lockedByIntruder flag for use by admin tools

Alright, I'm going to maintain consistency with the ldap layer for now. I'm going to put a comment in about this decision