That is why when I disable accounts, I not only lock it but set their shell to /bin/false (or noshell/nologin if on a system that has it). That should fix the problem of someone logging in via...