We should allow for user account "locking" in the core.
It is going to be such a powerful feature that many
everything administrators will find themselves in need of
if they run a serious site.
An entry in the user table and a few opcodes should be
sufficient.