The LockOutManager stores a null LockOutFlag (the default) in the cache,
which shouldn't work (and doesn't in a cluster).