code: def unlock
        if locked? && enabled?
          Cratus::LDAP.replace_attribute(
            dn,
            Cratus.config.user_lockout_attribute,
            ['0']
          )
          refresh
        elsif disabled?
          false
        else
          true
        end
      end
docs: Unlocks a user
   @return `true` on success (or if user is already unlocked)
   @return `false` when the account is disabled (unlocking not permitted)