The accounts should also be locked

Just in case ssh or some other connection method allows passwordless
login.

Signed-off-by: Stéphane Graber <stgraber@ubuntu.com>