Likely should do this across the board (e.g., rely more on README)

based upon a patch submitted by Jason Townsend (Apple).

for publication)

PP_accountLocked error for locked accounts. (Gives too much information
to attackers.)