3 ms·

I believe so, yes. you might need to do a temp password dance to get it configured initially, but after that "lock only" should work fine.