Put in place and test the new passwd that has -l implemented.
On a slightly-related note, usermod will now have -L and -U options as of shadow-utils-980403-11. While this doesn't get rid of the need for passwd -l, it's still nice to have and does the same thing.
fixed in passwd-0.57 and later