Forgive me if this seems too stupid to ask but I must be 100% sure of this - if Cleartext-Password is set to NULL in radcheck then this is equivalent to disabling the account?