show <centralauth-listusers-nolocal> before <centralauth-listusers-locked>

currently, the info about locked and unattached global accounts is:
"locked, unattached or doesn't exist locally"
that is somewhat misleading in English, meaning that the 'locked'
status is part of the disjunction and thus uncertain

Change-Id: Iad9fc5d9f767f53cb62ddb764f1549178b021392