allow toggling of lockedByIntruder flag for use by admin tools

Right. Maintain consistency with application layer vs underlying (ldap) layer. I don't have a preference.