You could include the call to `is_feature_enabled()` in `is_user_locked_out()`, as a user would never be locked out if the feature is disabled?