allow toggling of lockedByIntruder flag for use by admin tools

I opted to toggle the flag between being set to true and not being present because this is how eDirectory handles it internally.

I'm on the fence about this decision, eDirectory correctly handles the flag when it is set to false. So following the pre-existing pattern of other boolean attributes won't break any accounts, but doesn't follow how eDirectory handles the flag internally