5ef3e1f32b
When using openssh without pam it checks for a ! prefix in the password field, locking the account entirely if found. The other common lock character, *, is allowed by ssh to login via ssh keys so use it instead.