The LockOutManager stores a null LockOutFlag (the default) in the cache, which shouldn't work (and doesn't in a cluster).
