Attribute name	Options	Default
locked	true|false	No default
Tag name		File
principals/users/user		principals.xml

Whether or not the user is locked in his role. Good for preventing application-errors that lead to security holes (for instance adding the "guest" user to a role).